A critical stack-based buffer overflow in TRENDnet TEW-823DRU routers allows remote attackers to execute arbitrary code via a crafted L2TP password.

This is a stack-based buffer overflow caused by an insecure call to the strcpy function in the NVRAM component. The vulnerability is remotely exploitable and requires low privileges to initiate.

Successful exploitation of this vulnerability allows for remote code execution with high privileges, potentially granting an attacker full control over the affected network device. Given the critical CVSS score of 9.9, the compromise of a perimeter router poses a severe risk of network interception, lateral movement, and complete loss of confidentiality and integrity within the local network environment.

Immediate Action: Update the TRENDnet TEW-823DRU firmware to the latest available version that resolves this buffer overflow vulnerability.

Proactive Monitoring: Review device access logs for suspicious input patterns in CGI parameters and monitor for unusual outbound traffic originating from the router.

Compensating Controls: Implement strict firewall rules to restrict management interface access to trusted internal IP addresses only, effectively neutralizing the remote vector.

Public Exploit Available: Yes, a public proof-of-concept script has been identified on GitHub.

This vulnerability is critical due to the ease of remote exploitation and the potential for full device takeover. Administrators must prioritize applying the vendor provided update immediately, as the public availability of exploit code significantly increases the likelihood of opportunistic attacks targeting this specific hardware.