CVE-2020-14076

Опубликовано: 15 июн. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action st_dev_connect, st_dev_disconnect, or st_dev_rconnect with a sufficiently long wan_type key.

Ссылки

https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-st_dev.pdf
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_connect_overflow.pdf
Exploit
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_disconnect_overflow.pdf
Exploit
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_rconnect_overflow.pdf
Exploit
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/TRENDnet-st_dev.pdf
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_connect_overflow.pdf
Exploit
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_disconnect_overflow.pdf
Exploit
Third Party Advisory
https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/TEW-827/st_dev_rconnect_overflow.pdf
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*

Версия до 2.06b04 (включая)

cpe:2.3:h:trendnet:tew-827dru:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06399

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-rm4v-8mjg-vp33

github

больше 3 лет назад