CVE-2019-11417

Summary

system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png

References

• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png

• ←Previous
• Next→