Description
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-08-18
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from an unsafe use of the strcpy function in the /cgi-bin/wan.cgi script of the TRENDnet TEW-823DRU. By manipulating the wan_l2tp_password argument, an attacker sends a payload that overflows the stack and can execute arbitrary code. The flaw exists in firmware 1.1.02b01 and can be triggered remotely over the web interface, giving an attacker the ability to take control of the device or alter its configuration, compromising confidentiality, integrity, and availability.

Affected Systems

Affected devices are TRENDnet TEW-823DRU routers running firmware version 1.1.02b01. The vulnerability is in the NVRAM component exposed via the /cgi-bin/wan.cgi page, and impacts any unit that has the L2TP WAN feature enabled.

Risk and Exploitability

The CVSS score of 9.4 indicates a high severity vulnerability. The exploit is publicly available and can be launched remotely without additional credentials or local access. While an EPSS score is not available, the lack of KEV listing does not reduce the risk, as the flaw remains actionable. Attackers can achieve remote code execution by sending a specially crafted password string to the wan_l2tp_password parameter, leading to arbitrary code execution on the device.

Generated by OpenCVE AI on August 19, 2026 at 06:59 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update from TRENDnet that resolves the strcpy overflow in wan.cgi.
  • If no patch is available, block external access to the /cgi-bin/wan.cgi endpoint or disable the L2TP WAN feature to reduce the attack surface.
  • Monitor the device for abnormal process execution or unauthorized firmware modifications and consider isolating the router from the Internet or applying firewall rules that restrict external traffic.

Generated by OpenCVE AI on August 19, 2026 at 06:59 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 25 Aug 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 18 Aug 2026 23:45:00 +0000

Type Values Removed Values Added
Description A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Title TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow
First Time appeared Trendnet
Trendnet tew-823dru
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:trendnet:tew-823dru:*:*:*:*:*:*:*:*
Vendors & Products Trendnet
Trendnet tew-823dru
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Trendnet Tew-823dru
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-25T01:47:43.353Z

Reserved: 2026-08-18T18:12:17.812Z

Link: CVE-2026-75976

cve-icon Vulnrichment

Updated: 2026-08-25T01:47:38.874Z

cve-icon NVD

Status : Deferred

Published: 2026-08-19T00:16:28.510

Modified: 2026-08-25T03:16:56.927

Link: CVE-2026-75976

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-19T12:45:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow