Unscored CVE-2021-28844 EUVD-2021-15498GHSA-fv7c-vwwc-7p9f

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP …

Published Aug 10, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.

References

https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf