critical9.8
CVE-2019-11417
system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp functio…
Impact
system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendnet | Tv-Ip110wn Firmware | Versions 1.2.2.28, 1.2.2.64, 1.2.2.65, 1.2.2.68 |