PT-2026-147437

CVE-2026-129351

Published

2026-11-14

Updated

2026-11-15

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-657BRM version 1.00.1

Description A remote memory corruption issue exists in the mini httpd component. An unauthenticated remote attacker can trigger an out-of-bounds write—a condition where data is written beyond the boundaries of a fixed-length buffer—via the /setup.cgi endpoint. This occurs within the sprintf() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ruanyi

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

Related identifiers