CVE-2026-75976
Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in TRENDnet TEW-823DRU Router

Vulnerability report for CVE-2026-75976, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-19

Last updated on: 2026-08-25

Assigner: VulDB

Description

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-25
Generated
2026-09-08
AI Q&A
2026-08-19
EPSS Evaluated
2026-09-06
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trendnet tew-823dru 1.1.02b01

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in TRENDnet TEW-823DRU router version 1.1.02b01. The flaw exists in the strcpy function of /cgi-bin/wan.cgi where a maliciously crafted wan_l2tp_password parameter can overflow a buffer and overwrite the return address on the stack. This allows remote attackers to potentially execute arbitrary code on the device.

Detection Guidance

Detect this vulnerability by sending a crafted HTTP POST request to /cgi-bin/wan.cgi with a long 'wan_l2tp_password' parameter. Monitor for crashes in the router's rc process or logs indicating stack-based buffer overflow. Example: curl -X POST http://<target-ip>/cgi-bin/wan.cgi -d 'wan_l2tp_password=<48-byte-padding>AAAA'

Impact Analysis

An attacker could exploit this to gain remote code execution on your router, potentially allowing them to take control of your network traffic, intercept sensitive data, or use your device as part of a botnet. The public availability of exploit code increases the risk of real-world attacks.

Compliance Impact

This vulnerability enables remote code execution via stack-based buffer overflow, which could allow unauthorized access to sensitive data. Such breaches may violate GDPR's data protection requirements and HIPAA's security rules for protected health information if exploited.

Mitigation Strategies

Immediately update the TRENDnet TEW-823DRU firmware to the latest version. Disable remote access to the router's web interface if not required. Block external access to /cgi-bin/wan.cgi via firewall rules. Monitor network traffic for suspicious POST requests to this endpoint.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75976. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart