CVE-2021-33315

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 11-05-2022 08:15

Last modified: - 20-05-2022 04:45

Total changes: - 2

Description

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer underflow would occur and the negative number will be passed to memcpy() later, which may cause buffer overflow or invalid memory access.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

9.8

Base score

3.9

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=trendnet AND product=ti-pg1284i_firmware AND versionEndExcluding=2.0.2.s0

vendor=trendnet AND product=ti-pg1284i AND version=2.0r

AND

vendor=trendnet AND product=ti-g102i_firmware AND version=-

vendor=trendnet AND product=ti-g102i AND version=-

AND

vendor=trendnet AND product=ti-g160i_firmware AND version=-

vendor=trendnet AND product=ti-g160i AND version=-

AND

vendor=trendnet AND product=ti-g642i_firmware AND version=-

vendor=trendnet AND product=ti-g642i AND version=-

AND

vendor=trendnet AND product=ti-pg102i_firmware AND version=-

vendor=trendnet AND product=ti-pg102i AND version=-

AND

vendor=trendnet AND product=ti-pg541i_firmware AND version=-

vendor=trendnet AND product=ti-pg541i AND version=-

AND

vendor=trendnet AND product=ti-rp262i_firmware AND version=-

vendor=trendnet AND product=ti-rp262i AND version=-

AND

vendor=trendnet AND product=teg-30102ws_firmware AND version=-

vendor=trendnet AND product=teg-30102ws AND version=-

AND

vendor=trendnet AND product=tpe-30102ws_firmware AND version=-

vendor=trendnet AND product=tpe-30102ws AND version=-

Reference

https://www.trendnet.com/support/view.asp?cat=4&id=81

Keywords

CVE-2021-33315

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-33315

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures