Threats tagged 'ghsa-3464-q7cf-fcvc'

A critical stack-based buffer overflow vulnerability exists in TRENDnet TEW-657BRM version 1.00.1, specifically in the processing of the /usr/sbin/upgrade_flash.cgi file. This vulnerability can be exploited remotely by manipulating the argument boundary, potentially leading to complete compromise of confidentiality, integrity, and availability. The vendor has not confirmed the vulnerability due to the product being end-of-life for over 15 years and has indicated they will notify customers accordingly. Public exploit code is available.