CVE-2026-10161: TRENDnet TEW-432BRP formResetStatistic stack-based overflow

Synopsis

A stack-based buffer overflow in the formResetStatistic handler of TRENDnet TEW-432BRP 3.10B20 routers, reached by manipulating the status_statistic argument sent to /goform/formResetStatistic. The flaw is exploitable over the network and requires only a low-privilege account on the device's web interface; a public exploit exists. Successful exploitation corrupts the stack of the embedded HTTP server, enabling code execution, configuration tampering, and denial of service on the router. The device has been end-of-life since 2009 and the vendor will not issue a fix; HarborGuard tracks the advisory for any future patch availability.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the router's HTTP management interface over the network.

• AuthenticationRequired

  A low-privilege account on the device's web UI is sufficient to invoke the vulnerable handler.

• Victim interactionNot required

  No user action on the victim side is needed; the request can be sent directly to the endpoint.

• Attack complexityDetail

  Attack complexity is low and a public exploit exists, making the overflow reliable in practice.

Blast Radius

• Executes attacker-controlled code in the context of the router's web server process, which typically runs with full device privileges.
• Reads and exfiltrates stored credentials, WPA keys, and routing or DHCP configuration held by the device.
• Modifies firewall rules, DNS settings, and persisted configuration to pivot or intercept traffic on the LAN.
• Crashes the HTTP service or the device itself, taking the network segment offline.