CVE-2026-10162

Vulnerability

A stack-based buffer overflow exists in the formSetPassword function of the /goform/formSetPassword endpoint in TRENDnet TEW-432BRP firmware version 3.10B20. The webpage argument is copied directly to a stack buffer without length validation, allowing an attacker to overflow the buffer and overwrite the return address. This product has been end-of-life (EOL) since 2009 and is no longer supported by the vendor [1].

Exploitation

An attacker can exploit this vulnerability remotely by sending a crafted HTTP POST request to the vulnerable endpoint. No authentication is required if the device uses default credentials (as shown in the published PoC, which includes an Authorization header with base64-encoded admin:admin). The attacker supplies an overly long webpage parameter in the POST body, causing the stack overflow. The published proof-of-concept demonstrates a crash by sending a string of 870 'a' characters [1].

Impact

Successful exploitation allows an attacker to overwrite the return address on the stack, leading to arbitrary code execution with the privileges of the boa web server process. This can result in full compromise of the router, including disclosure of network traffic, modification of device settings, and use as a pivot for further attacks. At a minimum, the device crashes, causing denial of service [1].

Mitigation

No patch is available. The vendor has stated that the product has been EOL for 15 years (since 2009) and will not be fixed [1]. Users should replace the device with a supported model and isolate any remaining units from untrusted networks. There is no known workaround.