CVE-2026-19830

TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources

State: Published
Severity: 6.9 Medium
Published: Aug 14, 2026
Updated: Aug 14, 2026
Reserved: Aug 14, 2026

Description

A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R	VulDB
3.0	5.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-770 Allocation of Resources
CWE-400 Resource Consumption

Affected Products

Product	Versions
TEW-816DRMTRENDnet	GURNC4.OT182B-C-TN-R1B028-US.ENAffected

References

VDB-389971 | TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resourcesvdb-entrytechnical-description
VDB-389971 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-19830 | CVE Analysis and Reportthird-party-advisory
Submit #870259 | TRENDnet TEW-816DRM TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN (2018-05-16) Misconfigurationthird-party-advisory
https://app.notion.com/p/TEW-816DRM-GURNC4-OT182B-C-TN-R1B028-US-EN-2018-05-16-38b1f5ba989080759a1ee701542f1935?source=copy_linkrelated

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.