CVE-2026-10062: TRENDnet TEW-432BRP formSetRoute stack-based overflow
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10062?
CVE-2026-10062 has a high severity score of 8.8.
What type of vulnerability is described in CVE-2026-10062?
CVE-2026-10062 describes a stack-based buffer overflow vulnerability.
How can an attacker exploit CVE-2026-10062?
An attacker can exploit CVE-2026-10062 remotely by manipulating the arguments ip, mask, and gateway in the formSetRoute function.
What products are affected by CVE-2026-10062?
CVE-2026-10062 affects the TRENDnet TEW-432BRP version 3.10B20.
What steps can be taken to mitigate CVE-2026-10062?
To mitigate CVE-2026-10062, it is recommended to update the firmware of the TRENDnet TEW-432BRP device if a fix is available.