This vulnerability exists in TRENDnet TEW-755AP devices up to version 20260702. The flaw is a stack-based buffer overflow in the function FUN_401000 within the /sbin/mycli binary, caused by improper handling of the ssid argument. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 9.4, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, availability, and security requirements. Public exploit code is available, but no official patch or vendor advisory has been published yet.

Successful exploitation can lead to remote code execution or denial of service on affected TRENDnet TEW-755AP devices. The vulnerability impacts confidentiality, integrity, availability, and security controls at a high level. Given the remote attack vector and no required privileges or user interaction, the risk to exposed devices is critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, affected users should consider network-level mitigations such as restricting access to the device management interface and monitoring for exploitation attempts. No vendor advisory or patch links are currently provided.