CVE-2026-75783
Received Received - Intake

Stack-Based Buffer Overflow in TRENDnet TEW-WLC100P

Vulnerability report for CVE-2026-75783, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: VulDB

Description

A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trendnet tew-wlc100p 12.07b01

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in TRENDnet TEW-WLC100P firmware v12.07b01. It occurs in the DHCP blobmsg handler of the /sbin/netifd component. An attacker within the local network can send a malicious DHCP Option 42 payload to overflow the stack buffer, potentially allowing arbitrary code execution.

Detection Guidance

Detect this vulnerability by monitoring for crashes in the netifd process on TRENDnet TEW-WLC100P devices. Check logs for DHCP-related errors or unexpected reboots. Use network traffic analysis tools like Wireshark to inspect DHCP Option 42 (NTP Server) payloads for malformed or oversized data.

Impact Analysis

An attacker could exploit this to crash the device or execute arbitrary code, gaining control over the TEW-WLC100P. This could lead to network disruption, unauthorized access, or further compromise of connected systems.

Compliance Impact

This vulnerability could potentially lead to unauthorized access or control of the affected device due to stack-based buffer overflow allowing arbitrary code execution. For GDPR, this may result in unauthorized processing of personal data if the device handles such data. For HIPAA, if the device is used in healthcare environments, it could compromise protected health information.

Mitigation Strategies

Immediately update the TRENDnet TEW-WLC100P firmware to the latest patched version. Isolate the device from untrusted networks, especially the local network where the attack originates. Disable DHCP Option 42 handling if possible or restrict DHCP server access to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75783. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart