CVE-2024-37641: High severity trendnet tew-815dap vulnerability
Published Jun 14, 2024
·Updated
TRENDnet TEW-814DAP v1(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule
Affected Software
3 affected components
Trendnet TEW-814DAP
All of the following
Trendnet Tew-814dap Firmware=1.01b01
Trendnet TEW-814DAP=1.0
Event History
Jun 14, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37641?
CVE-2024-37641 is classified as a critical severity vulnerability due to the potential for remote code execution via the stack overflow.
2
How do I fix CVE-2024-37641?
To fix CVE-2024-37641, it is recommended to update the firmware of TRENDnet TEW-814DAP to the latest version that addresses this vulnerability.
3
What are the consequences of not addressing CVE-2024-37641?
Failing to address CVE-2024-37641 could lead to unauthorized access or control of the device, compromising network security.
4
Which versions of TRENDnet TEW-814DAP are affected by CVE-2024-37641?
CVE-2024-37641 affects TRENDnet TEW-814DAP v1 with firmware version FW1.01B01.
5
How does CVE-2024-37641 exploit the TRENDnet TEW-814DAP device?
CVE-2024-37641 exploits the device through a stack overflow triggered by a malicious input in the submit-url parameter at /formNewSchedule.