The TRENDnet TEW-432BRP router firmware version 3.10B20 contains a stack-based buffer overflow vulnerability in the formSetPassword function of the /goform/formSetPassword endpoint. An attacker can remotely trigger this vulnerability by manipulating the webpage argument, potentially leading to memory corruption and arbitrary code execution. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The product has been EOL since 2009, and the vendor has explicitly stated they will not provide patches or fixes for this vulnerability. No official remediation or workaround is available from the vendor.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected device, potentially leading to full compromise of the router. Given the high CVSS score and remote attack vector, the impact on confidentiality, integrity, and availability is high. However, the affected product is no longer supported, so no vendor remediation exists. No known exploits in the wild have been reported so far.

No official patch or fix is available due to the product being end-of-life since 2009. Users are advised to replace the affected TRENDnet TEW-432BRP devices with currently supported hardware to mitigate this vulnerability. Network-level protections such as firewall rules restricting access to the device's management interface from untrusted networks may reduce exposure. Monitor for any unusual activity on the device, but note that no vendor-provided remediation or temporary fixes exist.