CVE-2026-10062

Vulnerability

A stack-based buffer overflow vulnerability exists in the formSetRoute function of the TRENDnet TEW-432BRP router running firmware version 3.10B20. The function is located in the file /goform/formSetRoute and processes the ip, mask, and gateway arguments from HTTP POST requests. These arguments are copied directly into a fixed-size stack buffer without any length validation, leading to a buffer overflow when overly long input is supplied [1].

Exploitation

An attacker with network access to the router's web interface can exploit this vulnerability by sending a crafted POST request to /goform/formSetRoute with an excessively long value for the ip, mask, or gateway parameter. The PoC demonstrates a request using default administrative credentials (admin:admin) and a long ip value that causes the router to crash [1]. While the CVE description states the attack is remotely exploitable, the reference indicates that valid administrative credentials are required to access the vulnerable endpoint.

Impact

Successful exploitation allows an attacker to overwrite the return address on the stack, potentially leading to arbitrary code execution with root privileges on the device. At a minimum, the overflow causes a denial of service by crashing the router. The vendor has confirmed that the product is end-of-life and will not provide a fix [1].

Mitigation

The TRENDnet TEW-432BRP has been end-of-life since 2009, and the vendor explicitly states they will not replicate or fix any vulnerabilities [1]. No patches or workarounds are available. Users are strongly advised to replace the device with a supported model to ensure security.