CVE-2020-14078: Buffer Overflow
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wificaptiveportallogin with a sufficiently long REMOTEADDR key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14078?
CVE-2020-14078 is classified as a high severity vulnerability due to its ability to enable arbitrary code execution.
How do I fix CVE-2020-14078?
To fix CVE-2020-14078, update the TRENDnet TEW-827DRU firmware to a version above 2.06B04.
Who is affected by CVE-2020-14078?
Users of TRENDnet TEW-827DRU devices running firmware version 2.06B04 or earlier are affected by CVE-2020-14078.
What type of vulnerability is CVE-2020-14078?
CVE-2020-14078 is a stack-based buffer overflow vulnerability found in the ssi binary.
Can CVE-2020-14078 be exploited remotely?
CVE-2020-14078 requires authenticated user access, but exploitation can occur through the device's web interface.