A critical stack-based buffer overflow in TRENDnet TEW-755AP allows remote attackers to execute arbitrary code by manipulating the SSID parameter.

This is a memory corruption vulnerability involving a stack-based buffer overflow in the mycli binary. The flaw is reachable via remote network requests, requiring low-privileged authentication to successfully trigger the overflow.

The ability to trigger a buffer overflow remotely poses an extreme risk to the availability and security of the affected wireless access point. An attacker could leverage this to gain unauthorized system access, leading to a complete compromise of the device and potential lateral movement within the network. The 9.9 CVSS score highlights the urgency of addressing this flaw.

Immediate Action: There is no specific patch version provided at this time; users should frequently check the TRENDnet support website for firmware releases.

Proactive Monitoring: Monitor system logs for crashes or unexpected reboots of the TEW-755AP, which may indicate attempts to exploit the overflow.

Compensating Controls: Limit access to the management interface and administrative services to designated management VLANs to reduce the attack surface.

Public Exploit Available: Yes, a proof-of-concept Python script is available on GitHub.

The severity of this vulnerability is extreme. Administrators must treat this as a high priority for remediation and ensure that any available firmware updates are applied as soon as they are released by the vendor.