CVE-2026-10179: TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflow

Synopsis

A stack-based buffer overflow exists in the TRENDnet TEW-432BRP router (firmware 3.10B20) within the formSetWlanEncrypt function, reachable via the /goform/formSetWlanEncrypt endpoint over the network. The flaw is triggered by passing an oversized value in the webpage argument, and requires a low-privilege authenticated session to exploit. Successful exploitation gives an attacker full control over the device, including the ability to read, modify, or crash it. No patch exists and none is expected; TRENDnet has confirmed the product reached end-of-life in 2009 and will not issue a fix. HarborGuard tracks the advisory and will make a patched rebuild available if upstream ever publishes one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable endpoint is exposed over the network, meaning an attacker must be able to reach the device's HTTP interface remotely.

• AuthenticationRequired

  A low-privilege authenticated session is sufficient; any valid account on the device satisfies this requirement.

• Victim interactionNot required

  No victim interaction is needed; the attacker submits a crafted request directly without requiring any user action.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special conditions, race windows, or environmental dependencies.

Blast Radius

• An attacker can overwrite the stack and redirect execution, achieving remote code execution on the device.
• All credentials, Wi-Fi passphrases, and network configuration stored on the router are readable by the attacker.
• The attacker can modify router settings, including wireless encryption configuration and routing rules.
• The overflow can crash the affected firmware process, taking the router offline and disrupting network connectivity for all connected clients.