CVE-2019-11417

system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.

• CWE-20
• CWE-787

• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.pngThird Party Advisory
• https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.pngThird Party Advisory

Published

Apr 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11411An issue was discovered in Artifex MuJS 1.0.5. The Number#to…
• CVE-2019-11412An issue was discovered in Artifex MuJS 1.0.5. jscompile.c c…7.5
• CVE-2019-11413An issue was discovered in Artifex MuJS 1.0.5. It has unlimi…
• CVE-2019-11414An issue was discovered on Intelbras IWR 3000N 1.5.0 devices…
• CVE-2019-11415An issue was discovered on Intelbras IWR 3000N 1.5.0 devices…
• CVE-2019-11416A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 dev…
• CVE-2019-11418apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a b…
• CVE-2019-11419vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat appl…5.5
• CVE-2019-1142An elevation of privilege vulnerability exists when the .NET…5.5
• CVE-2019-11426An XSS issue was discovered in app/admincp/template/admincp.…
• CVE-2019-11427An XSS issue was discovered in app/search/search.app.php in …
• CVE-2019-11428I, Librarian 4.10 has XSS via the export.php export_files pa…