CVE-2024-42813

9.8 criticalEPSS 0.7%

Critical (9.8) in trendnet tew-752dru firmware. EPSS 0.7% chance of exploitation in the next 30 days.

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2024-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tew-752dru_firmware

References

https://gist.github.com/XiaoCurry/204680035c1efffa27d14956820ad928

Check your stack JSON