CVE-2020-14074: Buffer Overflow
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action kickbanwifimacallow with a sufficiently long qcawifi.wifi0vap0.maclist key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14074?
CVE-2020-14074 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2020-14074?
To fix CVE-2020-14074, update the TRENDnet TEW-827DRU firmware to a version later than 2.06B04.
What type of vulnerability is CVE-2020-14074?
CVE-2020-14074 is a stack-based buffer overflow vulnerability.
Who is affected by CVE-2020-14074?
Users of TRENDnet TEW-827DRU devices running firmware version 2.06B04 or earlier are affected by CVE-2020-14074.
What can an attacker achieve with CVE-2020-14074?
An authenticated attacker can execute arbitrary code on the affected device through the exploit.