{"affected":[{"product":"TEW-657BRM","source":"CNA: VulDB","vendor":"TRENDnet","versions":[{"status":"affected","version":"1.00.1"}]}],"cveId":"CVE-2026-129352","cwes":["CWE-121","CWE-119"],"description":"A vulnerability was detected in TRENDnet TEW-657BRM 1.00.1. This issue affects some unknown processing of the file /usr/sbin/upgrade_flash.cgi. Performing a manipulation of the argument boundary results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor explains: \"\"I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know.\"","epss":null,"exploits":[{"kind":"exploit","source":"CNA: VulDB","url":"https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/TRENDnet-TEW-657BRM-upgrade_flash.md"}],"kev":null,"metrics":[{"score":9.4,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","version":"4.0"},{"score":9.1,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.1"},{"score":9.1,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.0"},{"score":8.3,"severity":"high","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR","version":"2.0"}],"modifiedAt":1794697227224,"publishedAt":1794697227224,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/437398"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/437398/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-129352"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1043522"},{"source":"CNA: VulDB","tags":["exploit","patch"],"url":"https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/TRENDnet-TEW-657BRM-upgrade_flash.md"}],"remediation":[{"kind":"fix","source":"CNA: VulDB","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/ruanyi101/router-firmware-security-advisories/blob/main/router-firmware-GitHub-advisories/advisories/TRENDnet-TEW-657BRM-upgrade_flash.md"}],"revision":"3ca38f8f748eea87a60a11d1efa400968e45a2b52a4c375de36737099c01190a","sources":[{"modifiedAt":1794697227224,"name":"CNA: VulDB","retrievedAt":1794697705019,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129352"}],"ssvc":null,"status":"published","title":"TRENDnet TEW-657BRM upgrade_flash.cgi stack-based overflow","updatedAt":1794697705019}