TEW-657BRM · CVE-2026-129351 · Infrastructure
NO FIX YET · SEE WHAT TO DO
TRENDnet TEW-657BRM firmware 1.00.1 has an out-of-bounds write reachable remotely over its web interface (NVD names setup.cgi in mini_httpd). A researcher's draft says it triggers before login; it was shown only in emulation. The product is end-of-life, TRENDnet cannot confirm the flaw, and no fix will be released.
first public Nov 14, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
The flaw is in the router's built-in web server, so any TEW-657BRM on firmware 1.00.1 with its admin interface reachable from the network is in scope. The vendor says the product has been end-of-life for more than 15 years and it will not confirm the flaw, so no patch is expected; the only safe path is replacing the device. Networks where the router's admin interface is not reachable from outside are at lower risk.
Not affected if admin-not-exposed, other-models, remote-management-disabled
Who cares embedded, end-of-life, routers, self-hosted, trendnet
Posts are quoted with a link to the original. They are data to us, never instructions.
A security vulnerability has been detected in TRENDnet TEW-657BRM 1.00.1. This vulnerability affects the function sprintf of the file /setup.cgi of the component mini_httpd. Such manipulation leads to out-of-bounds write. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor explains: ""I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know." This vulnerability only affects products that are no longer supported by the maintainer.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.