Which versions of TRENDnet TEW-432BRP are affected by EUVD-2026-33481?

TRENDnet TEW-432BRP routers are vulnerable to authenticated memory corruption attacks via the web management interface, with publicly available exploit code amplifying attack surface.

Is there a public PoC exploit available for EUVD-2026-33481?

Yes, a public proof-of-concept exploit is available for EUVD-2026-33481. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-33481?

24 hours: Inventory all TRENDnet TEW-432BRP 3.10B20 instances and restrict administrative access to trusted networks only. 7 days: Procure replacement routers from actively supported vendors and initiate decommissioning plan. 30 days: Complete retirement of all affected units and validate replacement deployments.

TRENDnet TEW-432BRP EUVD-2026-33481

Q: What is the CVSS score of EUVD-2026-33481?

EUVD-2026-33481 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-10162 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-05-31 VulDB

GHSA-5wv2-hxpv-3f64

Buffer Overflow Stack Overflow Tew 432Brp

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 31, 2026 - 03:29 vuln.today

v3 (cvss_changed)

Analysis Updated

May 31, 2026 - 03:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 31, 2026 - 03:22 vuln.today

cvss_changed

CVSS changed

May 31, 2026 - 03:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 31, 2026 - 02:42 vuln.today

DescriptionCVE.org

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Stack-based buffer overflow in TRENDnet TEW-432BRP 3.10B20 router firmware allows authenticated remote attackers to corrupt memory via the webpage parameter in the formSetPassword handler at /goform/formSetPassword, with publicly available exploit code increasing risk. The vendor has formally declined to patch this end-of-life device (EOL since 2009), making any deployment permanently vulnerable. CVSS 4.0 rates this 7.4 (High) with proven exploit maturity, though no CISA KEV listing exists at this time.

Technical ContextAI

The TEW-432BRP is a consumer-grade 802.11g wireless broadband router whose web management interface uses CGI-style handlers under the /goform/ URI namespace, a common pattern in embedded Boa/mini_httpd-derived firmware. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), meaning the formSetPassword function copies the attacker-controlled webpage argument into a fixed-size stack buffer without bounds checking. On MIPS/ARM embedded targets typical of this hardware generation, such overflows commonly overwrite the saved return address and enable arbitrary code execution, often without modern mitigations like stack canaries, ASLR, or non-executable stacks that were absent from 2009-era SOHO router builds. The affected CPE is cpe:2.3:a:trendnet:tew-432brp:*:*:*:*:*:*:*:*, indicating all firmware versions of this model are considered affected.

RemediationAI

No vendor-released patch identified at time of analysis - TRENDnet has formally declined to fix the issue due to the product's end-of-life status since 2009. The only durable remediation is hardware replacement: retire the TEW-432BRP and migrate to a currently supported router that receives security updates. As compensating controls while replacement is pending, disable remote/WAN administration entirely so the web UI is unreachable from the internet (side effect: loss of remote management), restrict LAN-side access to the management interface to a single trusted admin host via firewall or VLAN segmentation, change the default administrative password to a strong unique value to make the PR:L precondition harder to satisfy, and place the device behind a separate upstream firewall/NAT layer that blocks unsolicited inbound traffic. Monitor outbound traffic from the router for signs of botnet recruitment. Vendor statement and exploit details are tracked at https://vuldb.com/vuln/367415 and the public PoC at https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_15/15.md.