CVE-2021-28843
HIGHTrendnet Tew-755ap Firmware - NULL Pointer Dereference
Title source: ruleDescription
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
Scores
CVSS v3
7.5
EPSS
0.0034
EPSS Percentile
56.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (4)
trendnet/tew-755ap2kac_firmware
1.11b03
trendnet/tew-755ap_firmware
1.11b03
trendnet/tew-821dap2kac_firmware
1.11b03
trendnet/tew-825dap_firmware
1.11b03
Published
Aug 10, 2021
Tracked Since
Feb 18, 2026