This vulnerability exists in the TRENDnet TEW-755AP device up to version 20260702 in the ssi component's /cgi-bin/wan.cgi file. Manipulating the cameo.wan.wan_pppoe_password_00 parameter leads to a stack-based buffer overflow, which can be triggered remotely without user interaction or elevated privileges. The CVSS 4.0 score is 9.4, indicating critical severity with high impact on confidentiality, integrity, availability, and scope. Public exploit code is available, but no vendor patch or remediation details are provided in the input data.

Successful exploitation can lead to remote code execution or denial of service due to the stack-based buffer overflow. The vulnerability affects confidentiality, integrity, and availability of the device. The presence of public exploit code increases the likelihood of exploitation. No information on active exploitation in the wild is provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's management interface from untrusted networks to reduce exposure. Monitor vendor communications for updates on patches or mitigations.