Vulnerability Details CVE-2024-22545
An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. The attack can be launched remotely.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.9%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2024-22545
-
cpe:2.3:h:trendnet:tew-824dru:-
-
cpe:2.3:o:trendnet:tew-824dru_firmware:1.04b01