CVE-2021-33317

Published: May 11, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.

Affected (9)

Products: Trendnet: Ti Pg1284i Firmware, Ti G102i Firmware, Ti G160i Firmware, Ti G642i Firmware, Ti Pg102i Firmware, Ti Pg541i Firmware, Ti Rp262i Firmware, Teg 30102ws Firmware, Tpe 30102ws Firmware

9 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg1284i Firmware	Before 2.0.2.s0

Running on/with	Platform Versions
Trendnet Ti Pg1284i	Version 2.0r

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G102i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G102i	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G160i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G160i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti G642i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti G642i	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg102i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Pg102i	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Pg541i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Pg541i	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Ti Rp262i Firmware	All versions

Running on/with	Platform Versions
Trendnet Ti Rp262i	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Teg 30102ws Firmware	All versions

Running on/with	Platform Versions
Trendnet Teg 30102ws	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Trendnet Tpe 30102ws Firmware	All versions

Running on/with	Platform Versions
Trendnet Tpe 30102ws	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://www.trendnet.com/support/view.asp?cat=4&id=81

Source: cve@mitre.org

PatchVendor Advisory

https://www.trendnet.com/support/view.asp?cat=4&id=81

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.