What’s Vulnerable › Vulnerabilities

CVE-2019-11417

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-22 · updated 2026-06-17
• Weakness: CWE-20

Description

system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.

Affected products

• TRENDnet Tv-Ip110Wn Firmware: 1.2.2.28, 1.2.2.64, 1.2.2.65, 1.2.2.68

References

• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png
• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png

Get alerted when CVE-2019-11417 or the next vulnerability affects your stack