Router

TRENDnet TEW-632BRP

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
1.0R / 1.1R
Retired support documentedOpen device guide
1.0R,1.1R; A1.xR
Open hardware record

Recorded configuration: 4 MB flash; 32 MB RAM

Device support in source
Retired; check the documented hardware and older release resources.
Sources

Features & details

Check the project and hardware shown for each feature.

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 9.8 (v3.1)

TRENDnet TEW-632BRP

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via…

CVE-2024-57590

Affected firmware
TEW-632BRP: v1.010B31
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntp_server" passed to the "ntp_sync.cgi" binary through a POST request.

CVSS 8.6 (v4.0)

TEW-632BRP

TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow

CVE-2026-4172

Affected firmware
1.010B32
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /ping_response.cgi of the component HTTP POST Request Handler. The manipulation of the argument ping_ipaddr results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-351079 | TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow — TEW-632BRP (vuldb.com) ↗VDB-351079 | CTI Indicators (IOB, IOC, IOA) — TEW-632BRP (vuldb.com) ↗Submit #769770 | TRENDnet TEW-632BRP v1.010B32 Denial of Service — TEW-632BRP (vuldb.com) ↗

TRENDnet TEW-632BRP

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices

CVE-2020-10215

Affected firmware
TEW-632BRP: 1.010B32
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

TRENDnet TEW-632BRP

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices

CVE-2020-10216

Affected firmware
TEW-632BRP: 1.010B32
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

TRENDnet TEW-632BRP

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices

CVE-2020-10213

Affected firmware
TEW-632BRP: 1.010B32
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.

Check more security advisories for this device · CVE.org