CVE-2024-22546: Command Injection
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22546?
The severity of CVE-2024-22546 is classified as High due to the potential for remote command injection by an authenticated attacker.
How do I fix CVE-2024-22546?
To fix CVE-2024-22546, update the TRENDnet TEW-815DAP firmware to the latest version provided by the vendor.
Who can exploit CVE-2024-22546?
Only authenticated users with administrator privileges can exploit CVE-2024-22546 by sending a malicious POST request.
What are the potential consequences of CVE-2024-22546?
Exploitation of CVE-2024-22546 can lead to unauthorized execution of commands on the device, resulting in a full system compromise.
What products are affected by CVE-2024-22546?
The affected product is TRENDnet TEW-815DAP running version 1.0.2.0.