CVE-2026-10158: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_name results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
This vulnerability involves a stack-based buffer overflow in the formPortFw function of the TRENDnet TEW-432BRP router firmware version 3.10B20. The overflow occurs when the server_name argument is manipulated, allowing remote attackers to potentially execute arbitrary code or cause denial of service. The product has been end-of-life for over 15 years, and the vendor has explicitly stated they will not issue a fix or replicate the vulnerability. No official remediation or patch is available, and the vulnerability is publicly known with an exploit released.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the high CVSS score (8.7) and the nature of the buffer overflow, attackers could gain control over the device or disrupt its operation. However, the impact is limited to devices running the unsupported TEW-432BRP firmware version 3.10B20, which has been out of support since 2009.
Mitigation Recommendations
The vendor has stated that no fix or replication of the vulnerability will be provided due to the product's end-of-life status. Therefore, no official patch or remediation is available. Mitigation options include discontinuing use of the affected device and replacing it with a supported model. Network segmentation or firewall rules could be used to limit remote access to the device to reduce exposure, but these are not official vendor recommendations.
CVE-2026-10158: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
Description
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_name results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 8.7high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a stack-based buffer overflow in the formPortFw function of the TRENDnet TEW-432BRP router firmware version 3.10B20. The overflow occurs when the server_name argument is manipulated, allowing remote attackers to potentially execute arbitrary code or cause denial of service. The product has been end-of-life for over 15 years, and the vendor has explicitly stated they will not issue a fix or replicate the vulnerability. No official remediation or patch is available, and the vulnerability is publicly known with an exploit released.
Potential Impact
Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Given the high CVSS score (8.7) and the nature of the buffer overflow, attackers could gain control over the device or disrupt its operation. However, the impact is limited to devices running the unsupported TEW-432BRP firmware version 3.10B20, which has been out of support since 2009.
Mitigation Recommendations
The vendor has stated that no fix or replication of the vulnerability will be provided due to the product's end-of-life status. Therefore, no official patch or remediation is available. Mitigation options include discontinuing use of the affected device and replacing it with a supported model. Network segmentation or firewall rules could be used to limit remote access to the device to reduce exposure, but these are not official vendor recommendations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-30T07:00:24.047Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1b8fede29bf47b50aef099
Added to database: 05/31/2026, 01:33:33 UTC
Last enriched: 06/07/2026, 20:44:57 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 135
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.