9.9Crítica
CVE-2026-109157TRENDnet TEW-432BRP formTcpipSetup stack-based overflow
Descripción
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| TRENDnet | TEW-432BRP | 3.10B20 | |
| trendnet | tew-432brp firmware | — |
Referencias y parches
- VDB-416890 | TRENDnet TEW-432BRP formTcpipSetup stack-based overflow vdb-entrytechnical-description
- VDB-416890 | CTI Indicators (IOB, IOC, IOA) signature
- CVE-2026-109157 | CVE Analysis and Report third-party-advisory
- Submit #979590 | TRENDnet TEW-432BRP 3.10B20 Stack-based Buffer Overflow third-party-advisory
- https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md exploit