CVE-2023-0617 TRENDNet TEW-811DRU httpd guestnetwork.asp buffer overflow
Remote attackers can exploit a buffer overflow in the TRENDNet TEW-811DRU router's httpd service to execute arbitrary code or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0617?
CVE-2023-0617 is a high-severity memory corruption vulnerability in TRENDNet TEW-811DRU, published on 1 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219957 was assigned to this vulnerability.
Weakness: CWE-120
Which versions are affected by CVE-2023-0617?
It affects 1 product.
Products include Trendnet Tew-811dru Firmware.
How do I fix CVE-2023-0617?
No fix has been published for CVE-2023-0617 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-0617 being exploited?
There is no known exploitation of CVE-2023-0617 in the wild and no public exploit code.
Other vulnerabilities in TRENDNet TEW-811DRU
- CVE-2025-15472 TRENDnet TEW-811DRU httpd uapply.cgi setDeviceURL os command injection
- CVE-2023-0612 TRENDnet TEW-811DRU httpd basic.asp buffer overflow
- CVE-2023-0613 TRENDnet TEW-811DRU httpd security.asp memory corruption
- CVE-2023-0638 TRENDnet TEW-811DRU Web Interface command injection
- CVE-2023-0637 TRENDnet TEW-811DRU Web Management Interface wan.asp memory corruption
Sources
Also known as GHSA-73v4-w888-f22p.