Skip to main content

TRENDnet TEW-821DAP CVE-2026-15484

| EUVDEUVD-2026-43206 HIGH
Classic Buffer Overflow (CWE-120)
2026-07-12 VulDB GHSA-98p4-49cg-c9qh
Buffer Overflow Tew 821Dap
8.7
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Network-reachable web endpoint with low complexity and no UI, but the admin/diagnostic interface requires privileges (PR:L); a buffer overflow plausibly yields full C/I/A impact on the device.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jul 12, 2026 - 07:01 vuln.today

DescriptionCVE.org

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Buffer overflow in the TRENDnet TEW-821DAP (firmware 1.12B01) wireless access point lets an authenticated remote attacker corrupt memory through the ssi-driven /goform/tools_nslookup handler (function sub_41EC14), enabling likely remote code execution or device crash. The device is end-of-life and the vendor has stated it cannot confirm or fix the issue, so no official patch is expected. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach AP web management interface
Delivery
Authenticate with valid/weak credentials
Exploit
Send over-long input to /goform/tools_nslookup
Execution
Overflow buffer in sub_41EC14
Persist
Overwrite control flow in ssi daemon
Impact
Execute code or crash device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network reachability to the TEW-821DAP HTTP management interface and the ability to invoke the /goform/tools_nslookup endpoint backed by function sub_41EC14 in the ssi component; per CVSS PR:L, some authenticated/privileged access to the web UI is needed, so this is not an unauthenticated-against-default attack. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 base score is 8.7 (High) with vector AV:N/AC:L/AT:N/PR:L/UI:N and full VC:H/VI:H/VA:H impact, indicating network-reachable, low-complexity exploitation that nonetheless requires some level of privileges (PR:L) - consistent with the endpoint living behind an authenticated web-management session rather than being fully anonymous. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who can reach the device's web management interface and holds (or brute-forces/reuses) valid credentials sends a crafted request to /goform/tools_nslookup with an over-long target parameter, overflowing the buffer handled by sub_41EC14. This corrupts control-flow data in the SSI/web daemon, crashing the service or, with a tuned payload, executing attacker code on the AP. …
Remediation No vendor-released patched firmware version has been identified - the intelligence flag 'Patch: Available from vendor' conflicts with the vendor's EOL statement that it cannot confirm or address the flaw, and the cited GitHub link is a disclosure write-up rather than a fixed build, so treat this as No vendor-released patch identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Audit network inventory to identify and document all TEW-821DAP devices currently deployed and their administrative access controls. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Tew 821Dap

View all
CVE-2026-15483 HIGH
8.7 Jul 12

Buffer overflow in the TRENDnet TEW-821DAP (v1.0R, firmware 1.12B01) dual-band access point lets an authenticated remote
CVE-2026-7607 HIGH
8.7 May 02

Remote authenticated attackers can execute arbitrary code on TRENDnet TEW-821DAP v1.xR hardware running firmware 1.12B01
CVE-2026-7611 MEDIUM
6.3 May 02

Insufficient verification of firmware authenticity in TRENDnet TEW-821DAP up to version 1.12B01 allows remote attackers

CVE-2026-7606 MEDIUM
6.3 May 02

Insufficient verification of data authenticity in the firmware update handler of TRENDnet TEW-821DAP 1.12B01 allows remo
CVE-2026-7609 LOW POC
2.1 May 02

OS command injection in TRENDnet TEW-821DAP firmware up to version 1.12B01 allows authenticated remote attackers to exec
CVE-2026-7608 LOW POC
2.0 May 02

OS command injection in TRENDnet TEW-821DAP up to firmware version 1.12B01 allows authenticated local attackers to execu
CVE-2026-15486 MEDIUM
5.3 Jul 12

OS command injection in TRENDnet TEW-821DAP firmware 1.11B03 allows a network-adjacent authenticated attacker to execute
CVE-2026-15485 MEDIUM
5.3 Jul 12

OS command injection in the TRENDnet TEW-821DAP 1.11B03 wireless access point allows authenticated remote attackers to e
CVE-2026-7610 LOW
2.9 May 02

TRENDnet TEW-821DAP firmware version 1.12B01 transmits sensitive information in cleartext via the /www/cgi/ssi endpoint

Same weakness CWE-120 – Classic Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2016-10174 CRITICAL POC
9.8
CVE-2016-0099 HIGH POC
7.8
CVE-2016-6366 HIGH POC
8.8
CVE-2013-1331 HIGH
7.8
CVE-2013-0641 HIGH
7.8
CVE-2017-15222 CRITICAL POC
9.8
CVE-2012-2763 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2026-15484 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy