What’s Vulnerable › Vulnerabilities

CVE-2023-49236

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-06-17
• Weakness: CWE-787

Description

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

Affected products

• TRENDnet Tv-Ip1314Pi Firmware: 5.5.3-200714

References

• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf
• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf

Get alerted when CVE-2023-49236 or the next vulnerability affects your stack