Which versions of TRENDnet TEW-821DAP are affected by CVE-2026-15483?

The TRENDnet TEW-821DAP dual-band access point contains a high-severity buffer overflow (CVSS 8.7) enabling authenticated remote code execution on affected devices.. A patch is available.

How to fix or mitigate CVE-2026-15483?

Within 24 hours: Conduct inventory of all TRENDnet TEW-821DAP units with firmware 1.12B01 or earlier. Within 7 days: Apply vendor-released patch to all identified devices. Within 30 days: Complete patching of all affected units or initiate hardware replacement for end-of-life product refresh.

TRENDnet TEW-821DAP CVE-2026-15483

Q: What is the CVSS score of CVE-2026-15483?

CVE-2026-15483 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-43205 HIGH

Classic Buffer Overflow (CWE-120)

2026-07-12 VulDB

GHSA-j9x6-5fxr-xh6q

Buffer Overflow Tew 821Dap Trendnet

8.7

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable web endpoint with low complexity, but the nslookup tool sits behind admin login so PR:L; overflow in a root httpd yields high C/I/A via likely code execution.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 12, 2026 - 07:00 vuln.today

DescriptionCVE.org

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to initiate the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Buffer overflow in the TRENDnet TEW-821DAP (v1.0R, firmware 1.12B01) dual-band access point lets an authenticated remote attacker corrupt memory via the ssi handler sub_41EC14, reachable through the /goform/tools_nslookup endpoint. Supplying an oversized nslookup_target value overruns a fixed buffer (CWE-120), enabling denial of service and likely arbitrary code execution on the device. No public exploit has been identified at time of analysis; the product is end-of-life and the vendor states it cannot confirm the flaw.

Technical ContextAI

The affected component is the router's SSI (Server Side Includes) web-management CGI, specifically the tools_nslookup diagnostic feature that lets administrators run a DNS lookup from the device. The vulnerable routine sub_41EC14 copies the attacker-controlled nslookup_target parameter into a fixed-size stack or global buffer without bounds checking, the classic pattern of CWE-120 (Buffer Copy without Checking Size of Input). On embedded MIPS/ARM router firmware such overflows commonly overwrite the return address or adjacent control data in the lightweight httpd (goform) process, which typically runs as root, so successful exploitation can escalate from a memory corruption to full command execution on the appliance. The CPE cpe:2.3:a:trendnet:tew-821dap identifies the single affected product.

RemediationAI

No vendor-released patched firmware version is independently confirmed: the intelligence feed lists a patch as available, but TRENDnet states the TEW-821DAP is EOL and cannot confirm the flaw, and the only 'patch' reference is a third-party research writeup (https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_BO2.md) rather than an official release - so treat this as no vendor-released patch identified at time of analysis and check TRENDnet's support site for any final firmware. Because the device is unsupported, the recommended path is to replace the appliance with a currently-maintained access point. As compensating controls until replacement: restrict access to the web-management interface to a dedicated management VLAN or trusted admin hosts (blocks the network reach the overflow needs, but hampers legitimate remote administration); disable remote/WAN-side administration entirely; enforce strong, unique admin credentials since exploitation requires authentication (mitigates the PR:L prerequisite but does not stop a logged-in or credential-compromised attacker); and where feasible avoid using the built-in nslookup diagnostic tool. Monitor the VulDB entry at https://vuldb.com/vuln/377790 for updates.