CVE-2021-33317
High
Description
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.
SeverityHigh
CVSS7.5
Exploit probability—
ProductTrendnet Ti-pg1284i Firmware
PublishedMay 11, 2022
First seenMay 11, 2022
How to fix
Update
- trendnet ti-pg1284i_firmware2.0.2.s0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendnet ti-pg1284i_firmware | v < 2.0.2.s0 | 2.0.2.s0 |
| trendnet ti-g102i_firmware | No range specified | — |
| trendnet ti-g160i_firmware | No range specified | — |
| trendnet ti-g642i_firmware | No range specified | — |
| trendnet ti-pg102i_firmware | No range specified | — |
| trendnet ti-pg541i_firmware | No range specified | — |
| trendnet ti-rp262i_firmware | No range specified | — |
| trendnet teg-30102ws_firmware | No range specified | — |
| trendnet tpe-30102ws_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.