CVE-2021-33317 - CVE House
Back to Database
Status published High CVE-2021-33317

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers...

Vulnerability Description

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33317

Credits & Attribution

No credits recorded in the NVD database.

References

More from trendnet

View All →
CVE-2022-47065
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was...
Unknown 0
CVE-2022-46601
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-46600
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-46599
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow...
Unknown 0
CVE-2022-46598
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection...
Unknown 0

Affected Vendor

Affected Software

ti-pg1284i firmware, ti-g102i firmware, ti-g160i firmware, ti-g642i firmware, ti-pg102i firmware, ti-pg541i firmware, ti-rp262i firmware, teg-30102ws firmware, tpe-30102ws firmware
Vulnerable Versions:
0

Timeline

Official Publish: May 11th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.