high7.5
CVE-2021-28844
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending t…
Impact
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendnet | Tew-755ap Firmware | Version 1.11b03 |
| Trendnet | Tew-755ap2kac Firmware | Version 1.11b03 |
| Trendnet | Tew-821dap2kac Firmware | Version 1.11b03 |
| Trendnet | Tew-825dap Firmware | Version 1.11b03 |