This vulnerability involves a stack-based buffer overflow in the formResetStatistic function of the TRENDnet TEW-432BRP router firmware version 3.10B20. An attacker can remotely trigger this overflow by manipulating the status_statistic argument in the /goform/formResetStatistic endpoint. Due to the product being EOL for over 15 years, the vendor does not provide patches or mitigations. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Public exploit code is available, increasing the risk for affected devices still in operation.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device due to the stack-based buffer overflow. Given the high CVSS score and the remote attack vector, attackers can potentially compromise the device without authentication or user interaction. However, the impact is limited to devices running the unsupported and outdated firmware version 3.10B20 of the TRENDnet TEW-432BRP router.

No official fix or patch is available because the product has been end-of-life since 2009 and the vendor does not support it anymore. Users are advised to discontinue use of the affected device and replace it with a supported model. Since no vendor remediation exists, network-level protections such as blocking access to the device's management interface from untrusted networks may reduce exposure but do not eliminate the risk.