CVE-2022-46593: Critical severity trendnet tew-755ap vulnerability

Published Dec 30, 2022

Updated

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wpsstaenrolleepin parameter in the dostaenrolleewifi function.

Affected Software

4 affected components

Trendnet Tew-755ap Firmware=1.13b01

Trendnet TEW-755AP

All of the following

Trendnet Tew-755ap Firmware=1.13b01

Trendnet TEW-755AP

Event History

Dec 30, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-46593.

What is the severity of CVE-2022-46593?

The severity of CVE-2022-46593 is critical with a CVSS score of 9.8.

What software is affected by CVE-2022-46593?

TRENDnet TEW755AP 1.13B01 firmware is affected by CVE-2022-46593.

What is the description of CVE-2022-46593?

CVE-2022-46593 is a stack overflow vulnerability in TRENDnet TEW755AP 1.13B01 firmware.

Is TRENDnet TEW-755AP vulnerable to CVE-2022-46593?

No, TRENDnet TEW-755AP is not vulnerable to CVE-2022-46593.

How can CVE-2022-46593 be exploited?

CVE-2022-46593 can be exploited by sending a specially crafted wps_sta_enrollee_pin parameter to the do_sta_enrollee_wifi function.

Is there a fix available for CVE-2022-46593?

There is currently no fix available for CVE-2022-46593. It is recommended to follow the vendor's security advisories for updates.

What is the Common Weakness Enumeration (CWE) ID for CVE-2022-46593?

The CWE ID for CVE-2022-46593 is CWE-787 (Out-of-bounds Write).

Where can I find more information about CVE-2022-46593?

More information about CVE-2022-46593 can be found at the following reference: [link](https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-do_sta_enrollee_wifi-11ba97191f944eeb88f495091926b7a9)