CVE-2026-75492 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Cudy TR3000 routers before firmware 2.5.42 have a stack buffer overflow in the stun_client TR-111 UDP connection request parser. A single crafted UDP datagram sent without authentication can overflow a 10-byte stack buffer and crash stun_client, causing denial of service.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Cudy TR3000 routers running firmware before 2.5.42 that expose the stun_client TR-111 UDP connection request service. The parser runs before any username or HMAC check, so an unauthenticated remote sender can reach it over UDP. Owners of routers on updated firmware, or with the service unreachable from outside, can skip it.
Not affected if firmware-2.5.42-or-later, stun-client-disabled
Who cares cudy-tr3000, home-router, tr-069
2.5.42 are in the stated range2.5.42 or laterCudy TR3000 before 2.5.42 contains an unauthenticated stack buffer overflow vulnerability in the stun_client TR-111 UDP Connection Request parser that parses requests before verifying username or HMAC. Remote attackers can send a single crafted UDP datagram lacking a space in the request line, causing strncpy() to overflow a 10-byte stack buffer and crash stun_client for denial of service.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.