[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-20 18:50 UTC
Importiert: 2026-10-20 20:24 UTC
Quelle-ID: full_disc
uid_hash: 7e5b69fbbf7a7b2fda7c37bbfc19f169830847910cbf66831a433a41a1a4e7bd

Full Disclosure

Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet

TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera from

TRENDnet (United States). The camera's application daemon is shipped at

/hunt/hunt_server: an ARM 32-bit EABI5 version 5TE soft-float binary,

dynamically linked against /lib/ld-linux.so.3, 4.5 MB and stripped. Its own

string pool carries hunt_camera, HuntAudioConverter, HuntDataDirect and...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss