A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulation of the argument keyword_list/keyword causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
A stack-based buffer overflow vulnerability exists in the EOL TRENDnet TEW-432BRP router firmware version 3.10B20 through the formSetUrlFilter function, allowing remote code execution. The vulnerability affects unsupported legacy devices and poses significant risk to organizations still operating this hardware.
ثغرة تجاوز المخزن المؤقت المستند إلى المكدس في جهاز التوجيه TRENDnet TEW-432BRP الإصدار 3.10B20 من خلال وظيفة formSetUrlFilter تسمح بتنفيذ أوامر بعيدة. الجهاز انتهى دعمه منذ 15 سنة ولا يتلقى تحديثات أمان من البائع. هذه الثغرة تؤثر فقط على الأجهزة القديمة التي لا تزال قيد التشغيل في بعض المنظمات.
A stack-based buffer overflow vulnerability exists in the EOL TRENDnet TEW-432BRP router firmware version 3.10B20 through the formSetUrlFilter function, allowing remote code execution. The vulnerability affects unsupported legacy devices and poses significant risk to organizations still operating this hardware.
Immediately discontinue use of TRENDnet TEW-432BRP routers as they are EOL since 2009 with no vendor support. Replace with current-generation networking equipment from supported vendors. If immediate replacement is impossible, isolate affected devices on segregated networks with strict access controls and monitor for exploitation attempts.
توقف فوري عن استخدام أجهزة التوجيه TRENDnet TEW-432BRP لأنها انتهت دعمها منذ 2009. استبدلها بأجهزة شبكة حديثة من بائعين معتمدين. إذا كان الاستبدال الفوري غير ممكن، عزل الأجهزة المتأثرة على شبكات منفصلة مع ضوابط وصول صارمة ومراقبة محاولات الاستغلال.