CVE-2024-36728: Buffer Overflow

Q: What is the severity of CVE-2024-36728?

CVE-2024-36728 is a high severity vulnerability due to its potential for remote code execution.

Q: How do I fix CVE-2024-36728?

To mitigate CVE-2024-36728, update the TRENDnet TEW-827DRU firmware to a version higher than 2.06B04.

Q: Who is affected by CVE-2024-36728?

CVE-2024-36728 affects TRENDnet TEW-827DRU devices running firmware version 2.06B04 or lower.

Q: What type of vulnerability is CVE-2024-36728?

CVE-2024-36728 is a stack-based buffer overflow vulnerability allowing authenticated users to execute arbitrary code.

Q: What can attackers exploit in CVE-2024-36728?

Attackers can exploit CVE-2024-36728 by POSTing to apply.cgi with overly long dns1 or dns2 keys.

Published Jun 3, 2024

Updated

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlansetting with a sufficiently long dns1 or dns 2 key.

Affected Software

3 affected components

Trendnet TEW-827DRU<=2.06B04

All of the following

Trendnet TEW-827DRU firmware<=2.06b04

Trendnet TEW-827DRU

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

Jun 3, 2024

CVE Published

via NVD·02:15 PM

Aug 2, 2024

Data Sourced

via MITRE·03:46 AM

Description

Frequently Asked Questions

What is the severity of CVE-2024-36728?

CVE-2024-36728 is a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-36728?

To mitigate CVE-2024-36728, update the TRENDnet TEW-827DRU firmware to a version higher than 2.06B04.

Who is affected by CVE-2024-36728?

CVE-2024-36728 affects TRENDnet TEW-827DRU devices running firmware version 2.06B04 or lower.

What type of vulnerability is CVE-2024-36728?

CVE-2024-36728 is a stack-based buffer overflow vulnerability allowing authenticated users to execute arbitrary code.

What can attackers exploit in CVE-2024-36728?