CVE-2021-33316

Published: May 11, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV, by sending a crafted lldp packet to the device, integer underflow would occur and the negative number will be passed to memcpy() later, which may cause buffer overflow or invalid memory access.

Affected (9)

Products: Trendnet: Ti Pg1284i Firmware, Ti G102i Firmware, Ti G160i Firmware, Ti G642i Firmware, Ti Pg102i Firmware, Ti Pg541i Firmware, Ti Rp262i Firmware, Teg 30102ws Firmware, Tpe 30102ws Firmware

9 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg1284i Firmware	Before 2.0.2.s0

Running on/with	Platform Versions
Trendnet Ti Pg1284i	Version 2.0r

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G102i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G102i	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G160i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G160i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G642i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G642i	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg102i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Pg102i	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg541i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Pg541i	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Rp262i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Rp262i	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Teg 30102ws Firmware	All versions

Running on/with	Platform Versions
Trendnet Teg 30102ws	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Tpe 30102ws Firmware	All versions

Running on/with	Platform Versions
Trendnet Tpe 30102ws	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.trendnet.com/support/view.asp?cat=4&id=81

Source: cve@mitre.org

PatchVendor Advisory

https://www.trendnet.com/support/view.asp?cat=4&id=81

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.