CVE-2026-15480: Stack-based Buffer Overflow in Trendnet TEW-635BRM
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
The vulnerability CVE-2026-15480 affects Trendnet TEW-635BRM devices running firmware up to version 1.00.03. It is a stack-based buffer overflow in the start_httpd function of the /sbin/rc file, caused by improper handling of the device_name argument. This flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The vendor has not confirmed the vulnerability and does not provide a patch due to the product's end-of-life status since 2011, advising users to replace affected devices. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected Trendnet TEW-635BRM devices, compromising confidentiality, integrity, and availability. Since the device is end-of-life and unsupported, no official fixes are available, increasing exposure risk if the device remains in use.
Mitigation Recommendations
No official patch or fix is available from the vendor as the product is end-of-life and unsupported. The vendor recommends discontinuing use of the affected device and switching to a supported model. Users should replace the affected Trendnet TEW-635BRM devices running version 1.00.03 or earlier to mitigate this vulnerability.
CVE-2026-15480: Stack-based Buffer Overflow in Trendnet TEW-635BRM
Description
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 8.7high
Affected software
cpe:2.3:a:trendnet:tew-635brm:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-15480 affects Trendnet TEW-635BRM devices running firmware up to version 1.00.03. It is a stack-based buffer overflow in the start_httpd function of the /sbin/rc file, caused by improper handling of the device_name argument. This flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The vendor has not confirmed the vulnerability and does not provide a patch due to the product's end-of-life status since 2011, advising users to replace affected devices. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected Trendnet TEW-635BRM devices, compromising confidentiality, integrity, and availability. Since the device is end-of-life and unsupported, no official fixes are available, increasing exposure risk if the device remains in use.
Mitigation Recommendations
No official patch or fix is available from the vendor as the product is end-of-life and unsupported. The vendor recommends discontinuing use of the affected device and switching to a supported model. Users should replace the affected Trendnet TEW-635BRM devices running version 1.00.03 or earlier to mitigate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-11T10:02:29.486Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a532ac668715ace4336652e
Added to database: 07/12/2026, 05:48:54 UTC
Last enriched: 07/19/2026, 19:14:34 UTC
Last updated: 08/25/2026, 10:52:07 UTC
Views: 105
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.