TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) function.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://brief-nymphea-813.notion.site/Vul1-TEW755-bof-auto_up_fw-1359a9e4b8ee4ad6b8632cc4a3e6eec1 | third party advisory exploit |