This vulnerability involves a stack-based buffer overflow in the ssi component of the /cgi-bin/wan.cgi file on TRENDnet TEW-755AP devices up to version 20260702. Specifically, manipulation of the cameo.wan.wan_pppoe_password_00 argument can cause the overflow. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 base score of 9.4, indicating critical severity. Public exploit code exists, but no known active exploitation has been confirmed. No vendor advisory or patch information is available at this time.

Successful exploitation can lead to remote code execution or denial of service due to the stack-based buffer overflow. Given the critical CVSS score and remote attack vector, affected devices are at high risk of compromise if exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device's management interfaces and monitor for suspicious activity related to the vulnerable CGI endpoint. Avoid exposing the device directly to untrusted networks.