CVE-2026-10180: fallo de gravedad media en TRENDnet TEW-432BRP
TRENDnet TEW-432BRP formSysCmd command injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 1.2%
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
TRENDnet · TEW-432BRPPoCs públicas encontradas — 1
cve_referencegithub.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_17/17.mdno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — TRENDnet TEW-432BRP
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-10061MEDIUMTRENDnet TEW-432BRP formWPS command injectionEPSS 5.5%CVE-2026-10060MEDIUMTRENDnet TEW-432BRP formSetRoute command injectionEPSS 5.5%CVE-2026-10179HIGHTRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflowEPSS 3.2%CVE-2026-10182MEDIUMTRENDnet TEW-432BRP formWlanSetup command injectionEPSS 2.0%CVE-2026-10063HIGHTRENDnet TEW-432BRP formWPS stack-based overflowEPSS 0.9%CVE-2026-10062HIGHTRENDnet TEW-432BRP formSetRoute stack-based overflowEPSS 0.8%