VULNERABILITY INTELLIGENCE

CVE-2024-42813

CVSS score9.8 CRITICAL
EPSS probability0.69%
CISA KEVNot currently listed
Published2024-08-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120

Primary references