PT-2026-36586 · Trendnet · Tew-821Dap

Iot_Res · Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-7607

NVD

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto update firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7607

Affected Products

Tew-821Dap

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-7607 · Security Note
• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_BO.md · Patch
• https://vuldb.com/vuln/360564/cti · Note
• https://vuldb.com/vuln/360564 · Note
• https://vuldb.com/submit/806214 · Note