CVE-2026-4172: TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow
A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /pingresponse.cgi of the component HTTP POST Request Handler. The manipulation of the argument pingipaddr results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4172?
CVE-2026-4172 has been classified as a critical vulnerability due to its potential for stack-based overflow.
How do I fix CVE-2026-4172?
To address CVE-2026-4172, TRENDnet advises updating the firmware of the TEW-632BRP to the latest version.
What is affected by CVE-2026-4172?
CVE-2026-4172 affects the TRENDnet TEW-632BRP router model specifically in the HTTP POST Request handler for the ping_response.cgi file.
Can CVE-2026-4172 lead to remote code execution?
Yes, CVE-2026-4172 can lead to remote code execution due to the stack-based overflow vulnerability.
Who is impacted by CVE-2026-4172?
Users of the TRENDnet TEW-632BRP version 1.010B32 are impacted by CVE-2026-4172.