A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument special_name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
A stack-based buffer overflow vulnerability exists in the deprecated TRENDnet TEW-432BRP router (EOL since 2009) through the formSetPortTr function. Remote attackers can exploit this flaw by manipulating the special_name parameter to potentially execute arbitrary code.
تم اكتشاف ثغرة تجاوز المخزن المؤقت المستندة إلى المكدس في جهاز التوجيه TRENDnet TEW-432BRP الذي انتهى دعمه منذ عام 2009. يمكن للمهاجمين البعيدين استغلال هذه الثغرة عن طريق التلاعب بمعامل special_name لتنفيذ كود تعسفي.
A stack-based buffer overflow vulnerability exists in the deprecated TRENDnet TEW-432BRP router (EOL since 2009) through the formSetPortTr function. Remote attackers can exploit this flaw by manipulating the special_name parameter to potentially execute arbitrary code.
Immediately discontinue use of TRENDnet TEW-432BRP routers and replace with supported networking equipment. If replacement is not immediately possible, isolate affected devices from critical networks and implement network segmentation to restrict access to the vulnerable interface.
توقف فوري عن استخدام أجهزة التوجيه TRENDnet TEW-432BRP واستبدالها بمعدات شبكة مدعومة. إذا لم يكن الاستبدال ممكناً فوراً، عزل الأجهزة المتأثرة عن الشبكات الحرجة وتطبيق تقسيم الشبكة لتقييد الوصول.