TRENDnet TEW-821DAP Buffer Overflow Vulnerability in Firmware Update Component

A buffer overflow vulnerability has been identified in the TRENDnet TEW-821DAP access point, specifically in firmware version 1.12B01. The issue arises in the 'auto_update_firmware' function within the firmware update process. The vulnerability allows for remote exploitation by manipulating the 'str' argument, which is not properly validated before being copied into a fixed-size buffer. This oversight can lead to out-of-bounds writing, causing a buffer overflow that could be exploited to disrupt the device's normal operation.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to arbitrary code execution or a denial-of-service condition, causing the device to become unresponsive or unavailable.