The TRENDnet TEW-432BRP router firmware version 3.10B20 contains a stack-based buffer overflow vulnerability in the formSetRoute function located in /goform/formSetRoute. By manipulating the IP, mask, or gateway parameters, an attacker can trigger a buffer overflow condition remotely. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor has declared the product EOL since 2009 and will not issue a fix or replicate the vulnerability. Exploit code has been publicly disclosed, but no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. Given the high CVSS score and remote exploitability without authentication, the impact on affected devices is significant. However, the affected product is no longer supported or maintained by the vendor, limiting official remediation options.

The vendor has explicitly stated that no fix or patch will be provided due to the product being end-of-life since 2009. Users should consider discontinuing use of the affected TRENDnet TEW-432BRP devices and replacing them with supported hardware. Network-level mitigations such as isolating the device from untrusted networks or blocking access to the vulnerable management interface may reduce exposure but do not eliminate the underlying vulnerability. Patch status is not confirmed as no official fix exists.