EUVD-2026-60773
GHSA-xvh6-w8q3-q5g8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable, low-complexity, unauthenticated overflow with no user interaction; embedded nginx compromise plausibly yields full code execution, so C/I/A all High.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Articles & Coverage 1
AnalysisAI
Remote stack-based buffer overflow in the embedded nginx binary (/usr/nginx/sbin/nginx) of the TRENDnet TEW-WLC100 wireless LAN controller, firmware 1v2.07b01, lets remote attackers overflow a fixed-size stack buffer in the HTTP Server-header handling routine FUN_0040da4c. Reported through VulDB with a public proof-of-concept exploit already available, the flaw carries a CVSS 4.0 base score of 9.3 and, per its vector, requires no authentication or user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the TEW-WLC100's embedded nginx HTTP interface and the ability to send a crafted HTTP request that drives oversized attacker-controlled data into the 'Server' header handling path processed by FUN_0040da4c. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals mostly align toward elevated risk: the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) describes a network-reachable, low-complexity, unauthenticated overflow with high impact to confidentiality, integrity, and availability, and the E:P exploit-maturity flag plus a linked GitHub POC confirm public exploit code exists. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who can reach the TEW-WLC100's HTTP management interface sends a crafted HTTP request whose Server-header-related input is oversized, overflowing the fixed stack buffer in FUN_0040da4c within the device's nginx binary. Given the low attack complexity and no authentication requirement (AC:L/PR:N/UI:N), a remote actor can trigger memory corruption to crash the service or attempt control-flow hijack for code execution. … |
| Remediation | No vendor-released patch or fixed firmware version is identified at time of analysis, and no TRENDnet advisory URL was provided in the source data, so the primary action is to monitor TRENDnet's support/security channels for a firmware update superseding 1v2.07b01 and apply it once released. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately inventory all TRENDnet TEW-WLC100 controllers running firmware 1v2.07b01 and isolate affected devices from untrusted networks; implement firewall rules and IP whitelisting to restrict access to the controller's management interface to authorized personnel only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Stack Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today