CVE-2026-75493
Received Received - Intake

Stack Buffer Overflow in Cudy TR3000 Firmware

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: VulnCheck

Description
Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in an obuspa getter for the TR-098 WLANConfiguration KeyPassphrase parameter, which copies the stored value with strcpy() into a 4,096-byte stack buffer without a length check. A malicious or compromised ACS can set a 5,000-byte passphrase via SetParameterValues, and a later read of the parameter overflows the buffer and crashes obuspa, causing denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-75493
EUVD
EUVD-2026-125263

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cudy tr3000 to 2.5.42 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-75493 is a stack buffer overflow in Cudy TR3000 devices running firmware before 2.5.42. The flaw is in the obuspa component's getter for the TR-098 WLANConfiguration KeyPassphrase parameter. It uses strcpy() to copy a value into a 4,096-byte stack buffer without length checks. A malicious actor can set a 5,000-byte passphrase via SetParameterValues, causing a buffer overflow when the parameter is read, crashing obuspa and leading to denial of service.

Detection Guidance

Check the firmware version of your Cudy TR3000 device. If it is below 2.5.42, the device is vulnerable. Use the device's web interface or SSH to verify the firmware version.

Impact Analysis

This vulnerability allows an attacker to crash the obuspa process on affected Cudy TR3000 devices, causing a denial of service. This disrupts network operations, potentially taking devices offline and preventing legitimate users from accessing network services.

Mitigation Strategies

Update the Cudy TR3000 firmware to version 2.5.42 or later immediately. Disable remote management features if not required to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75493. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...