Description
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TRENDnet | TEW-WLC100 | 1v2.07b01 | — |
References
- VDB-391525 | TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow vdb-entry technical-description
- VDB-391525 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-75784 | CVE Analysis and Report third-party-advisory
- Submit #877773 | TRENDnet TEW-WLC100 TEW-WLC100 Stack-based Buffer Overflow third-party-advisory
- https://github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx related
- https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow.py exploit