What is CVE-2021-33316?

CVE-2021-33316 is a critical-severity vulnerability in Trendnet Teg-30102ws, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2022-05-11.

How severe is CVE-2021-33316?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Improper input validation in Trendnet Teg-30102ws

CVE-2021-33316

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Trendnet Teg-30102ws
Trendnet Teg-30102ws_firmware
Trendnet Ti-g102i
Trendnet Ti-g102i_firmware
Trendnet Ti-g160i
Trendnet Ti-g160i_firmware
Trendnet Ti-g642i
Trendnet Ti-g642i_firmware
Trendnet Ti-pg102i
Trendnet Ti-pg102i_firmware

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-33316?: CVE-2021-33316 is a critical-severity vulnerability in Trendnet Teg-30102ws, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2022-05-11.
How severe is CVE-2021-33316?: Critical severity. CVSS v3 base score is 9.8 out of 10.