PT-2026-25545 · Trendnet · Tew-632Brp

Ic0Rner + 1 · Published 2026-03-15 · Updated 2026-03-16 · CVE-2026-4172

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:L/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-632BRP version 1.010B32

Description A flaw exists in TRENDnet TEW-632BRP that allows for a stack-based buffer overflow. This issue is located within the HTTP POST Request Handler component, specifically in the /ping response.cgi file. Manipulation of the ping ipaddr argument can trigger the overflow, and the attack can be performed remotely. The exploit for this issue is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-4172

Affected Products

Tew-632Brp

References · 8

• 🔥 https://github.com/i-Corner/cve/issues/40 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4172 · Security Note
• https://t.me/CVEtracker/47419 · Telegram Post
• https://twitter.com/cyberbivash/status/2033165772827115708 · Twitter Post
• https://twitter.com/CVEnew/status/2033194281830412655 · Twitter Post
• https://vuldb.com/?submit.769770 · Note
• https://vuldb.com/?id.351079 · Note
• https://vuldb.com/?ctiid.351079 · Note