CVE-2026-10119: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument filter_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
This vulnerability affects the TRENDnet TEW-432BRP router running firmware 3.10B20. It arises from a stack-based buffer overflow in the formSetMACFilter function, triggered by manipulation of the filter_name parameter. The overflow can be exploited remotely without user interaction or privileges, potentially allowing an attacker to execute arbitrary code or cause denial of service. The product is no longer supported by TRENDnet, which has explicitly declined to issue a fix due to the device's end-of-life status since 2009. No official remediation or patch is available, and the vulnerability is publicly known.
Potential Impact
Successful exploitation could allow remote attackers to execute arbitrary code or disrupt device operation via a stack-based buffer overflow. Given the device is EOL and unpatched, affected systems remain vulnerable indefinitely. However, no confirmed exploits in the wild have been reported to date.
Mitigation Recommendations
No official patch or fix is available due to the product's end-of-life status. Users should consider discontinuing use of the affected TRENDnet TEW-432BRP devices and replacing them with supported hardware. Network-level protections such as firewall rules restricting access to the device's management interface may reduce exposure. Patch status is not confirmed; check vendor advisories for any updates, though none are expected.
CVE-2026-10119: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
Description
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument filter_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 8.7high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the TRENDnet TEW-432BRP router running firmware 3.10B20. It arises from a stack-based buffer overflow in the formSetMACFilter function, triggered by manipulation of the filter_name parameter. The overflow can be exploited remotely without user interaction or privileges, potentially allowing an attacker to execute arbitrary code or cause denial of service. The product is no longer supported by TRENDnet, which has explicitly declined to issue a fix due to the device's end-of-life status since 2009. No official remediation or patch is available, and the vulnerability is publicly known.
Potential Impact
Successful exploitation could allow remote attackers to execute arbitrary code or disrupt device operation via a stack-based buffer overflow. Given the device is EOL and unpatched, affected systems remain vulnerable indefinitely. However, no confirmed exploits in the wild have been reported to date.
Mitigation Recommendations
No official patch or fix is available due to the product's end-of-life status. Users should consider discontinuing use of the affected TRENDnet TEW-432BRP devices and replacing them with supported hardware. Network-level protections such as firewall rules restricting access to the device's management interface may reduce exposure. Patch status is not confirmed; check vendor advisories for any updates, though none are expected.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-29T17:19:19.054Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1aeab3e29bf47b503358e8
Added to database: 05/30/2026, 13:48:35 UTC
Last enriched: 06/06/2026, 20:57:19 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 85
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.