A critical stack-based buffer overflow in TRENDnet TV-IP751WIC firmware allows remote code execution, posing a severe risk of total system compromise.

The vulnerability exists within the alphapd component, specifically in the set_time.cgi file. An authenticated attacker with low privileges can trigger a stack-based buffer overflow by sending a crafted payload to the Currenttime argument.

The CVSS score of 9.9 reflects the extreme severity of this flaw, as it allows for full system control. Successful exploitation could lead to complete device takeover, unauthorized surveillance, or the inclusion of the device in a botnet, resulting in significant reputational damage and loss of network integrity.

Immediate Action: Disconnect the affected camera from the public internet immediately and restrict access to the management interface via a firewall.

Proactive Monitoring: Monitor network traffic for unusual outbound connections from the camera, which may indicate command and control communication.

Compensating Controls: Implement a Web Application Firewall or network access control list to filter traffic destined for the camera management interface.

Public Exploit Available: Yes, a proof-of-concept exists on GitHub.

Given the critical nature of this buffer overflow and the availability of public exploit code, administrators must prioritize isolating these devices. If a firmware update is not yet available from the vendor, maintaining strict network segmentation is the only effective defense against remote exploitation.