TRENDnet TEW-637AP and TEW-638APB HTTP Request Handler Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the TRENDnet TEW-637AP and TEW-638APB access point models, specifically in firmware versions 1.2.7 and 1.3.0.106. The issue arises in the HTTP request handler component, within the function sub_41DED0, where improper handling of requests can lead to a denial-of-service condition. This vulnerability requires access to the local network to exploit.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by leading to a null pointer dereference, which can cause the device to crash or become unresponsive.