CVE-2018-19242

Опубликовано: 20 дек. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (with authentication).

Ссылки

http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/21
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/21
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:trendnet:tew-632brp_firmware:1.010b32:*:*:*:*:*:*:*

cpe:2.3:h:trendnet:tew-632brp:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:trendnet:tew-673gru_firmware:1.00b40:*:*:*:*:*:*:*

cpe:2.3:h:trendnet:tew-673gru:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.0288

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-x39m-5345-h729