{"id":"CVE-2026-109157","published":"2026-10-13T11:17:14.873","lastModified":"2026-10-14T14:17:36.947","description":"A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: \"As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product.\" This vulnerability only affects products that are no longer supported by the maintainer.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-119","CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-109157","tags":[]},{"url":"https://vuldb.com/submit/979590","tags":[]},{"url":"https://vuldb.com/vuln/416890","tags":[]},{"url":"https://vuldb.com/vuln/416890/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md","tags":[]}],"hasPoc":true,"ai":{"summary":"A stack-based buffer overflow in TRENDnet routers allows remote code execution when manipulating the 'Name' parameter in the formTcpipSetup function. This critical vulnerability affects unsupported devices from 2011 and can be exploited without user interaction.","exploitability":"Exploitation is relatively straightforward with remote access to the vulnerable router's web interface, requiring only a single HTTP request to trigger the buffer overflow.","blast_radius":"The vulnerability could affect thousands of legacy TRENDnet routers still in use, potentially allowing attackers to gain full control of network infrastructure and pivot to internal networks.","remediation":"Upgrade to firmware version 3.10B21 or later, as this is the first fixed version mentioned in the vendor's advisory for the affected TRENDnet TEW-432BRP model.","detection":"Monitor for unusual HTTP POST requests to /goform/formTcpipSetup with malformed Name parameters, particularly those exceeding 256 bytes, and watch for repeated failed authentication attempts or unexpected router reboots.","tags":["rce","web","legacy","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:45:27.355Z"}}