CVE-2020-14079: Buffer Overflow
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action autoupfw (or autouplp) with a sufficiently long updatefilename key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14079?
CVE-2020-14079 has a high severity rating due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-2020-14079?
To mitigate CVE-2020-14079, upgrade the TRENDnet TEW-827DRU firmware to a version later than 2.06B04.
Who is affected by CVE-2020-14079?
CVE-2020-14079 affects TRENDnet TEW-827DRU devices running firmware version 2.06B04 or lower.
What type of vulnerability is CVE-2020-14079?
CVE-2020-14079 is classified as a stack-based buffer overflow vulnerability.
Can CVE-2020-14079 be exploited remotely?
Yes, CVE-2020-14079 can be exploited remotely by an authenticated user sending a specially crafted POST request.