Description
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-08-19
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw is a stack-based buffer overflow triggered by an excessively long Currenttime argument to /cgi-bin/admin/set_time.cgi, allowing a remote attacker to crash the device or potentially execute arbitrary code. The vulnerability provides full control over the device, compromising confidentiality, integrity, and availability, and is exploitable simply by sending a crafted HTTP request. It constitutes a critical remote code execution risk for affected units.

Affected Systems

TRENDnet TV-IP751WIC routers running firmware version 11.03.03 contain the vulnerable /cgi-bin/admin/set_time.cgi component of the alphapd module. The flaw affects the administrative interface exposed by the device.

Risk and Exploitability

The CVSS score of 9.4 indicates critical severity. While the EPSS score is not available, the exploit is publicly released and can be launched remotely without local privileges. The flaw is not listed in the CISA KEV catalog, yet the public code demonstrates it can be used for attacks against the device from the Internet.

Generated by OpenCVE AI on August 20, 2026 at 08:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update from TRENDnet that fixes the buffer overflow to all affected routers.
  • If a firmware update is not immediately available, fully disable remote management of the /cgi-bin/admin interface or restrict it to trusted IP addresses through firewall rules.
  • Limit network exposure so the device is only reachable from an isolated management VLAN and monitor logs for abnormal POST/GET traffic to the set_time.cgi endpoint.

Generated by OpenCVE AI on August 20, 2026 at 08:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 20 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 19 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Title TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
First Time appeared Trendnet
Trendnet tv-ip751wic
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:trendnet:tv-ip751wic:*:*:*:*:*:*:*:*
Vendors & Products Trendnet
Trendnet tv-ip751wic
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Trendnet Tv-ip751wic
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-20T14:03:40.620Z

Reserved: 2026-08-19T14:08:15.432Z

Link: CVE-2026-76584

cve-icon Vulnrichment

Updated: 2026-08-20T14:03:34.776Z

cve-icon NVD

Status : Deferred

Published: 2026-08-19T21:17:38.857

Modified: 2026-08-20T14:17:59.463

Link: CVE-2026-76584

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T08:30:04Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow