This vulnerability affects TRENDnet TEW-WLC100 firmware version 1v2.07b01. The flaw exists in the HTTP Header Handler of the nginx component, where improper handling of the Server argument leads to a stack-based buffer overflow. This can be exploited remotely without authentication, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS 4.0 base score is 10.0, indicating critical severity. Public exploit code is available, increasing the risk of exploitation. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the critical CVSS score and the availability of public exploit code, affected systems are at high risk if exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting network exposure of the affected device and monitoring for exploit attempts. No vendor-provided mitigation or temporary fix is currently documented.