TRENDnet TEW-657BRM Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in the TRENDnet TEW-657BRM router, specifically in version 1.00.1. The issue arises in the 'update_pcdb' function of the '/setup.cgi' file, where the 'mac_pc_dba' parameter is processed without proper validation. This flaw allows for remote exploitation, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Reproduction

The vulnerability can be reproduced by sending a crafted POST request to '/setup.cgi' that includes a 'mac_pc_dba' parameter. This parameter should be filled with a payload that exceeds the buffer size, causing a stack overflow.