Stack Buffer Overflow in Cudy TR3000 WLAN Configuration

CVE-2026-75493

What is CVE-2026-75493?

A vulnerability exists in the Cudy TR3000, where prior to version 2.5.42, an obuspa getter for the TR-098 WLANConfiguration KeyPassphrase parameter allows a stack buffer overflow. The vulnerability arises from the use of strncpy() to copy a 5,000-byte passphrase into a 4,096-byte stack buffer without sufficient length checks. A compromised Auto-Configuration Server (ACS) can exploit this to crash obuspa, leading to a denial of service condition on the device.

References