CVE-2024-50667

The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6

Critical · published November 11, 2024

CVSS v3.1
9.8
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

🚨 Stack overflow alert! The Trendnet TEW-820AP is letting attackers craft malicious IPv6 addresses—like handing out faulty maps that lead right into a pit! 🔥 Think of it like a restaurant that serves food without checking for allergens. If the chef doesn't verify what's going into each dish, someone could end up in serious trouble after their meal—similarly, this flaw can turn an innocent packet into a ticket for disaster. An attacker could exploit this vulnerability to execute arbitrary code, potentially taking control of your device! This means they could access sensitive information, disrupt your network, or even pivot into your local infrastructure—absolutely devastating! You won't want this ticking time bomb in your setup.

Put simply

Think of it like a restaurant that serves food without checking for allergens. If the chef doesn't verify what's going into each dish, someone could end up in serious trouble after their meal—similarly, this flaw can turn an innocent packet into a ticket for disaster. The stack overflow resides in the boa httpd of the Trendnet TEW-820AP, specifically in how it handles IPv6 addresses. The insufficient checks on the input allow attackers to craft payloads that can overflow the stack, leading to remote code execution.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially taking control of your device! This means they could access sensitive information, disrupt your network, or even pivot into your local infrastructure—absolutely devastating! You won't want this ticking time bomb in your setup. To protect your device, update to the latest firmware version that addresses this vulnerability ASAP. Regularly review your network devices for updates and implement strict input validation on all web forms. Stay vigilant! You've got this! Follow these steps, and you’ll have your setup secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06669 · 93.9th percentile
Published
2024-11-11T00:00Z
EPSS history
Timeline
  • 11 NOV 00:00Z
    The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6
    cvelistv5