Tew 755Ap Firmware CVE-2021-28843

HIGH

NULL Pointer Dereference (CWE-476)

2021-08-10 cve@mitre.org

Null Pointer Dereference Denial Of Service Tew 755Ap Firmware Tew 755Ap2Kac Firmware Tew 821Dap2Kac Firmware Tew 825Dap Firmware

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Aug 10, 2021 - 19:15 nvd

HIGH 7.5

DescriptionNVD

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.

AnalysisAI

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as NULL Pointer Dereference (CWE-476), which allows attackers to crash the application by dereferencing a null pointer. Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name. Affected products include: Trendnet Tew-755Ap Firmware, Trendnet Tew-755Ap2Kac Firmware, Trendnet Tew-821Dap2Kac Firmware, Trendnet Tew-825Dap Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Check pointers before dereferencing. Use static analysis tools to detect null pointer paths.

More in Tew 755Ap Firmware

View all

CVE-2022-46601 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (s

CVE-2022-46600 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the actio

CVE-2022-46599 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_im

CVE-2022-46598 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin param

CVE-2022-46597 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in t

CVE-2022-46596 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (su

CVE-2022-46594 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_f

CVE-2022-46593 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_st

CVE-2022-46592 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_s

CVE-2022-46591 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41B

CVE-2022-46590 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the

CVE-2022-46589 CRITICAL Act Now POC

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the

Same weakness CWE-476 – NULL Pointer Dereference

View all

CVE-2016-0742 HIGH

CVE-2014-3470 MEDIUM

CVE-2017-3730 HIGH POC

CVE-2017-3169 CRITICAL POC

CVE-2016-4957 HIGH

CVE-2015-3194 HIGH

CVE-2026-21525 MEDIUM

CVE-2017-0016 MEDIUM

Same technique Null Pointer Dereference

View all

CVE-2016-0742 HIGH

CVE-2014-3470 MEDIUM

CVE-2017-3730 HIGH POC

CVE-2017-3169 CRITICAL POC

CVE-2016-4957 HIGH

CVE-2015-3194 HIGH

CVE-2026-21525 MEDIUM

CVE-2017-0016 MEDIUM

Share

CVE-2021-28843 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy