TRENDnet TEW-755AP Stack Overflow Vulnerability (CNVD-2023-18952)

TRENDnet TEW-755AP is a router from Trendnet, Inc. TRENDnet TEW-755AP is vulnerable to a stack overflow vulnerability that originates from the qcawifi.wifi%d_vap%d_maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00) function. vap%d.maclist parameter in the function lacks size checking of the input data, which could be exploited by an attacker to execute arbitrary code on the system.