Remote stack-based buffer overflow in Trendnet TEW-635BRM Web Service

Successful exploitation can result in memory corruption in the device web service process and may allow an attacker to execute arbitrary code or otherwise fully compromise the affected device. Given the reported severity and remote reachability, exploitation may also enable complete loss of confidentiality, integrity, and availability on the device, including service disruption and unauthorized modification of device behavior or configuration.

Until replacement is completed, reduce exposure by disabling or restricting access to the device web management interface, limiting administrative access to trusted management networks only, placing the device behind network segmentation and access controls, and preventing untrusted remote access to the affected service. Continuous monitoring for anomalous access to the management plane is also advisable. Because the product is unsupported and public exploit information exists, long-term mitigation should be treated as temporary only.

No vendor patch or supported firmware update is available for this end-of-life product. The primary remediation is to replace affected Trendnet TEW-635BRM devices with supported hardware. If replacement is not immediately possible, organizations should remove vulnerable devices from production use as soon as feasible.