high7.5
CVE-2021-33317
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability.
Impact
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendnet | Ti-Pg1284i Firmware | before 2.0.2.s0 |
| Trendnet | Ti-G102i Firmware | All versions |
| Trendnet | Ti-G160i Firmware | All versions |
| Trendnet | Ti-G642i Firmware | All versions |
| Trendnet | Ti-Pg102i Firmware | All versions |
| Trendnet | Ti-Pg541i Firmware | All versions |
| Trendnet | Ti-Rp262i Firmware | All versions |
| Trendnet | Teg-30102ws Firmware | All versions |
| Trendnet | Tpe-30102ws Firmware | All versions |