cbcvebase.
CVE-2019-11400
published 2019-12-18

CVE-2019-11400: An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp…

PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
16.64%
96.6th percentile
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.

Affected

3 ranges
VendorProductVersion rangeFixed in
trendnettew-651br_firmware——
trendnettew-652brp_firmware——
trendnettew-652bru_firmware——

Detection & IOCsextracted from sources · hover to see the quote

pathget_set.ccp↗
otherccp_act↗
  • →Monitor HTTP requests to get_set.ccp with an oversized or malformed ccp_act parameter on TRENDnet TEW-651BR, TEW-652BRP, and TEW-652BRU devices. ↗
  • →Affected device models and firmware versions: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, TEW-652BRU 1.00b12 — scope detection rules to these targets. ↗
  • ·Vulnerability is confirmed only on specific firmware versions; other versions of the same device models may not be affected. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.