TRENDnet TEW-432BRP vulnerabilities

A command injection vulnerability was found in TRENDnet TEW-432BRP firmware 3.10B20 in the formWPS function of /goform/formWPS. Manipulating the peerPin argument allows remote command execution. The vendor states the product has been end-of-life for 15 years and will not be patched.

A command injection vulnerability was discovered in TRENDnet TEW-432BRP firmware version 3.10B20. The flaw exists in the formSetRoute function within /goform/formSetRoute, where the ip, mask, and gateway parameters are not properly sanitized. The vendor states the product has been end-of-life for 15 years and will not provide fixes.

A stack-based buffer overflow was identified in TRENDnet TEW-432BRP version 3.10B20 in the formWlanSetup function of the /goform/formWlanSetup file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formWlanSetup function. Manipulating the enrollee argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSysCmd function of the /goform/formSysCmd file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

TRENDnet TEW-432BRP router version 3.10B20 has a command injection vulnerability in the formSysCmd function. Manipulating the sysCmd argument allows remote command execution. The product has been EOL for 15 years and no patch will be released.

In the TRENDnet TEW-432BRP router version 3.10B20, the function formSetWlanEncrypt in /goform/formSetWlanEncrypt is vulnerable to stack-based buffer overflow via the webpage argument. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product is EOL since 2009 and will not be fixed.

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSetPassword function of the /goform/formSetPassword file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A stack-based buffer overflow was detected in TRENDnet TEW-432BRP version 3.10B20 in the formResetStatistic function of the /goform/formResetStatistic file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSetEnableWizard function of the /goform/formSetEnableWizard file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. The function formSysLog of the file /goform/formSysLog is affected by stack-based buffer overflow via manipulation of the current_page argument, allowing remote exploitation. The vendor states the product has been EOL for 15 years and will not be fixed.

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. The function formPortFw of the file /goform/formPortFw is affected by stack-based buffer overflow via manipulation of the server_name argument, allowing remote exploitation. The vendor states the product has been EOL for 15 years and will not be fixed.

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSetDomainFilter function of the /goform/formSetDomainFilter file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP router version 3.10B20 in the formSetProtocolFilter function of the /goform/formSetProtocolFilter file. Remote attack is possible by manipulating the protocol_name argument. The vendor states the product has been EOL for 15 years and will not be fixed.

In TRENDnet TEW-432BRP version 3.10B20, a stack-based buffer overflow vulnerability was found in the formSetUrlFilter function of the /goform/formSetUrlFilter file. The attack involves manipulating the keyword_list/keyword arguments and can be performed remotely. The vendor confirmed the product is EOL for 15 years and will not release a patch.

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20 in the formSetFirewallRule function. Manipulating the firewall_name argument causes a stack-based buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor states the product is EOL since 2009 and will not be fixed.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP router version 3.10B20 in the formSetMACFilter function of the /goform/formSetMACFilter file. Remote attack is possible by manipulating the filter_name argument. The vendor states the product has been EOL for 15 years and will not be fixed.

A stack-based buffer overflow vulnerability was discovered in the TRENDnet TEW-432BRP router version 3.10B20 in the formSetPortTr function of /goform/formSetPortTr. The attack can be performed remotely by manipulating the special_name argument. The vendor states the product has been EOL for 15 years and will not be fixed.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP firmware version 3.10B20, specifically in the formWPS function of the /goform/formWPS file. Remote manipulation of the peerPin argument triggers the overflow. The vendor states the product has been end-of-life for 15 years and will not be fixed.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP firmware version 3.10B20, specifically in the formSetRoute function of the /goform/formSetRoute file. An attacker can remotely manipulate the ip/mask/gateway arguments to trigger the overflow. The exploit has been publicly disclosed and may be used.