CVE-2026-75783
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A stack-based buffer overflow vulnerability has been detected in the DHCP blobmsg Handler of the /sbin/netifd file in TRENDnet TEW-WLC100P version 12.07b01. The attack must be carried out from within the local network.
Risk Assessment
An attack from the local network could lead to code execution or device crash, potentially disrupting network operations.
Recommendation
Restrict access to the local network and contact the vendor for a firmware update or workaround.
Other vulnerabilities in TRENDnet TEW-WLC100P
See all- CVE-2025-44649High
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters.
- CVE-2025-44647High
In TRENDnet TEW-WLC100P version 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file. This allows IKE Responders to use IKEv1 Aggressive Mode with Pre-Shared Keys, enabling offline attacks on the openly transmitted PSK hash.
Original NVD description (English source)
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS