A critical stack-based buffer overflow vulnerability in the TRENDnet TV-IP751WIC camera allows authenticated remote attackers to execute arbitrary code or cause a denial of service.

The vulnerability exists within multiple functions of the alphapd component, where improper input validation during manipulation of network or system settings leads to a stack-based buffer overflow (CWE-121).

Exploitation of this vulnerability allows an attacker to overwrite memory, potentially leading to full system control or a persistent denial of service. With a CVSS score of 9.9, this vulnerability significantly threatens the security posture of the affected device and any network segments it occupies.

Immediate Action: Restrict access to the management interface of the device to trusted IP addresses only and monitor vendor support channels for a firmware update.

Proactive Monitoring: Monitor device traffic for anomalous payloads or repeated crashes of the alphapd service, which may indicate exploitation attempts.

Compensating Controls: Place the device on an isolated VLAN with strict firewall rules to prevent unauthorized access to the management functions.

Public Exploit Available: Yes — a proof-of-concept script has been published on GitHub.

Due to the availability of a public proof-of-concept and the critical nature of the flaw, immediate network-level isolation is required. Monitor the vendor website for firmware patches and apply them as soon as they become available.