CVE-2019-13280
HIGHTRENDnet TEW-827DRU <= 2.04B03 Authenticated Stack Overflow via Ping/Traceroute
Title source: llmDescription
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be exercised on the local intranet or remotely if remote administration is enabled.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280
Scores
CVSS v3
8.8
EPSS
0.0237
EPSS Percentile
85.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (1)
trendnet/tew-827dru_firmware
< 2.04b03
Published
Jul 09, 2019
Tracked Since
Feb 18, 2026