Description
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to initiate the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A buffer overflow exists in the sub_41EC14 function of the /goform/tools_nslookup component. Manipulating the nslookup_target argument can overflow a buffer, a flaw that can be triggered remotely through the web interface. Although the description does not confirm arbitrary code execution, a buffer overflow could corrupt memory, potentially enabling denial of service or remote code execution on the device.

Affected Systems

TRENDnet TEW‑821DAP model 1.12B01 is affected. The firmware version 1.12B01 is no longer supported by the vendor, and no current production firmware address this issue.

Risk and Exploitability

The CVSS score of 8.7 signals high severity. The EPSS score is below 1%, indicating a low probability of public exploitation today, and the vulnerability is not listed in the CISA KEV catalog. Because the affected firmware is EOL yet may still be deployed, devices remain susceptible to a remote attacker sending a crafted nslookup_target string via the web interface, which could lead to device compromise.

Generated by OpenCVE AI on July 29, 2026 at 08:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check for the existence of a newer firmware release that resolves the overflow and upgrade if available.
  • If no update exists, block external traffic to the /goform/tools_nslookup endpoint or to the web management interface using firewalls or ACLs to prevent remote exploitation.
  • Replace the TEW‑821DAP model with a newer device that receives regular security updates.
  • Continuously monitor traffic and logs for unusual requests to /goform/tools_nslookup or indicators of exploitation attempts.

Generated by OpenCVE AI on July 29, 2026 at 08:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 15 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 15 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 12 Jul 2026 07:45:00 +0000

Type Values Removed Values Added
First Time appeared Trendnet tew-821dap
Vendors & Products Trendnet tew-821dap

Sun, 12 Jul 2026 06:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to initiate the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Title TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
First Time appeared Trendnet
Trendnet tew-821dap Firmware
Weaknesses CWE-119
CWE-120
CPEs cpe:2.3:o:trendnet:tew-821dap_firmware:*:*:*:*:*:*:*:*
Vendors & Products Trendnet
Trendnet tew-821dap Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X'}

Subscriptions

Trendnet Tew-821dap Tew-821dap Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-15T16:22:52.567Z

Reserved: 2026-07-11T10:12:16.280Z

Link: CVE-2026-15483

cve-icon Vulnrichment

Updated: 2026-07-15T16:09:47.747Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T09:00:18Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')