CVE-2023-24099

CVSS V2 None CVSS V3 None
Description
** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Overview
  • CVE ID
  • CVE-2023-24099
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-23T15:15:18
  • Last Modified Date
  • 2023-02-01T14:03:17
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:trendnet:tew-820ap:1.0r:*:*:*:*:*:*:* 0 OR
History
Created Old Value New Value Data Type Notes
2023-01-23 16:15:11 Added to TrackCVE
2023-01-23 19:14:25 2023-01-23T17:17:06 CVE Modified Date updated
2023-01-23 19:14:25 Received Awaiting Analysis Vulnerability Status updated
2023-01-30 21:13:58 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-02-01 15:14:00 2023-02-01T14:03:17 CVE Modified Date updated
2023-02-01 15:14:00 Undergoing Analysis Analyzed Vulnerability Status updated
2023-02-01 15:14:00 Weakness Enumeration new
2023-02-01 15:14:01 CPE Information updated