CVE-2019-11400
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.
Se detectó un problema en los dispositivos TRENDnet TEW-651BR versión 2.04B1, TEW-652BRP versión 3.04b01 y TEW-652BRU versión 1.00b12. Se presenta un desbordamiento del búfer por medio del parámetro ccp_act del archivo get_set.ccp.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-04-21 CVE Reserved
- 2019-12-18 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://github.com/pr0v3rbs/CVE/blob/master/CVE-2019-11400/ticket.png | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.trendnet.com/support | 2019-12-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Trendnet Search vendor "Trendnet" | Tew-651br Firmware Search vendor "Trendnet" for product "Tew-651br Firmware" | 2.04b1 Search vendor "Trendnet" for product "Tew-651br Firmware" and version "2.04b1" | - |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-651br Search vendor "Trendnet" for product "Tew-651br" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-652brp Firmware Search vendor "Trendnet" for product "Tew-652brp Firmware" | 3.04b01 Search vendor "Trendnet" for product "Tew-652brp Firmware" and version "3.04b01" | - |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-652brp Search vendor "Trendnet" for product "Tew-652brp" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-652bru Firmware Search vendor "Trendnet" for product "Tew-652bru Firmware" | 1.00b12 Search vendor "Trendnet" for product "Tew-652bru Firmware" and version "1.00b12" | - |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-652bru Search vendor "Trendnet" for product "Tew-652bru" | - | - |
Safe
|