TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow
Published May 31, 2026
8.7
HIGHCVSS 4.0
EPSS 0.47%
Description
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such manipulation of the argument start_wizard leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
-
- Version 3.10B20StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TRENDnet | Tew-432brp | n/a |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33479 Advisory
- https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_13/13.md exploit
- https://vuldb.com/submit/814770 third-party-advisory
- https://vuldb.com/vuln/367413 vdb-entrytechnical-description
- https://vuldb.com/vuln/367413/cti signaturepermissions-required
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33479 | Advisory | |
| https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_13/13.md | exploit | |
| https://vuldb.com/submit/814770 | third-party-advisory | |
| https://vuldb.com/vuln/367413 | vdb-entrytechnical-description | |
| https://vuldb.com/vuln/367413/cti | signaturepermissions-required |
Change history (0)
No recorded changes yet.