PT-2026-25545 · Trendnet · Tew-632Brp

Ic0Rner + 1 · Publicado 2026-03-15 · Atualizado 2026-03-16 · CVE-2026-4172

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-632BRP version 1.010B32

Description A flaw exists in TRENDnet TEW-632BRP that allows for a stack-based buffer overflow. This issue is located within the HTTP POST Request Handler component, specifically in the /ping response.cgi file. Manipulation of the ping ipaddr argument can trigger the overflow, and the attack can be performed remotely. The exploit for this issue is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

CVE-2026-4172

Produtos afetados

Tew-632Brp

Referências · 8

• 🔥 https://github.com/i-Corner/cve/issues/40 · Exploit
• https://t.me/CVEtracker/47419 · Publicação no Telegram
• https://twitter.com/cyberbivash/status/2033165772827115708 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033194281830412655 · Publicação no Twitter
• https://vuldb.com/?submit.769770 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4172 · Nota de Segurança
• https://vuldb.com/?id.351079 · Nota
• https://vuldb.com/?ctiid.351079 · Nota