A stack-based buffer overflow occurs in the uci_safe_get function of the NTP Timezone Configuration Handler’s /cgi-bin/apply_time.cgi. Manipulating the parameters system.ntp.server, system.ntp.enable_server, cameo.time.time_zone, or cameo.cameo.syslog_server causes the function to copy unvalidated input into a fixed-size buffer, overwriting the stack and enabling an attacker to execute arbitrary code or crash the service. The vulnerability is a classic example of improper bounds checking (CWE-119) and can disrupt the router’s normal operation.

TRENDnet TEW-821DAP routers running firmware version 2.2.01b05 are affected. The flaw resides in the web‑based NTP Timezone Configuration interface of the device. No additional vendor or product versions are documented in the CVE record.

The CVSS base score of 10.0 signals critical severity, and the vulnerability is publicly disclosed with documented exploits. It can be triggered remotely through the router’s web interface; however, the CVE description does not specify whether authentication is required, so the exact ease of exploitation remains uncertain. The EPSS score is not available, which introduces uncertainty about the likelihood of exploitation, but the combination of a high CVSS, remote attack vector, and public exploit suggests a high likelihood of real‑world exploitation. The flaw is not yet listed in the CISA KEV catalog.