CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-33317
High (7.5) in trendnet. EPSS 0.9% chance of exploitation in the next 30 days.
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- trendnet:teg-30102ws_firmware
- trendnet:ti-g102i_firmware
- trendnet:ti-g160i_firmware
- trendnet:ti-g642i_firmware
- trendnet:ti-pg102i_firmware
- trendnet:ti-pg1284i_firmware
- trendnet:ti-pg541i_firmware
- trendnet:ti-rp262i_firmware
- trendnet:tpe-30102ws_firmware