CVE-2026-10161

Vulnerability

A stack-based buffer overflow exists in the formResetStatistic function within the /goform/formResetStatistic endpoint of TRENDnet TEW-432BRP firmware version 3.10B20. The vulnerability occurs when the status_statistic argument (also referred to as webpage in PoC examples) is processed without proper bounds checking, allowing an overly long input to overflow a stack buffer. This product has been end-of-life since 2009 and is no longer supported by the vendor [1].

Exploitation

An attacker with network access to the device's web interface can send a crafted POST request to /goform/formResetStatistic containing an excessively long status_statistic parameter. The request may require authentication; default credentials (admin/admin) are often used. The long input overwrites the function's return address on the stack, causing a buffer overflow. Public exploit code is available that demonstrates the crash by sending a string of 'a' characters [1].

Impact

Successful exploitation leads to denial of service (device crash) and could allow arbitrary code execution with root privileges, as the vulnerable service runs at a high privilege level. An attacker could fully compromise the router, execute arbitrary commands, alter configuration, or use it as a pivot point in the network.

Mitigation

The vendor has confirmed that the TEW-432BRP has been end-of-life for 15 years and will not release any patches. No workarounds exist. Users should replace the device with a supported model or isolate it from untrusted networks to reduce exposure.