CVE-2019-13276: Buffer Overflow
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13276?
CVE-2019-13276 is classified as critical due to the potential for arbitrary code execution through unauthenticated access.
How do I fix CVE-2019-13276?
To mitigate the effects of CVE-2019-13276, update the TRENDnet TEW-827DRU firmware to a version later than 2.04B03.
Who is affected by CVE-2019-13276?
Users of TRENDnet TEW-827DRU routers running firmware version 2.04B03 or earlier are vulnerable to CVE-2019-13276.
What type of attack is CVE-2019-13276?
CVE-2019-13276 involves a stack-based buffer overflow vulnerability that can be exploited via crafted POST requests.
Can CVE-2019-13276 be exploited remotely?
Yes, CVE-2019-13276 can be exploited remotely by unauthenticated users targeting specific CGI, TXT, ASP, or JS files.