Description
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks.
References (2)
Core 2
Core References
Exploit, Third Party Advisory
https://github.com/ixout/iotVuls/blob/main/Trendnet/TEW_820/report.md
Broken Link, Vendor Advisory
https://www.trendnet.com/support/support-detail.asp?prod=100_TEW-820AP
Scores
CVSS v3
9.8
EPSS
0.1988
EPSS Percentile
95.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-120
Status
published
Products (1)
trendnet/tew-820ap_firmware
1.01.b01
Published
Nov 11, 2024
Tracked Since
Feb 18, 2026