This vulnerability affects the TRENDnet TEW-432BRP router running firmware 3.10B20. An attacker can remotely exploit a command injection flaw in the formWlanSetup function by manipulating the 'enrollee' parameter. The vendor has confirmed the product is EOL since 2009 and will not issue a fix. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, and no user interaction needed. No known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to unauthorized control or disruption of the router. However, the impact is limited to devices still running this outdated and unsupported firmware version. Since the product is EOL and unsupported, no official remediation is available, increasing risk for those still using the device.

No official patch or fix is available because the product has been end-of-life since 2009 and the vendor does not support it. Users are advised to discontinue use of the TRENDnet TEW-432BRP device or replace it with a supported model. Network segmentation or isolating the device from untrusted networks may reduce exposure, but these are not vendor-recommended mitigations.