This vulnerability affects the Trendnet TEW-657BRM router running firmware 1.00.1. A stack-based buffer overflow can be triggered remotely via the update_pcdb function in /setup.cgi by manipulating the mac_pc_dba parameter. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction. The vendor has confirmed that the product is discontinued and end-of-life since 2011, and no official support or patch is available. The exploit has been publicly released, increasing the risk of exploitation on unpatched devices still in use.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected devices. Given the high CVSS score and the nature of stack-based buffer overflows, attackers could potentially take control of the device remotely without authentication. However, the impact is limited to devices running the specific discontinued firmware version 1.00.1 of the TEW-657BRM router. No known exploits in the wild have been reported at this time.

The vendor does not provide patches or support for this vulnerability due to the product's discontinued and end-of-life status since 2011. Users are advised to replace affected devices with supported hardware to mitigate the risk. No official fix or temporary workaround is available. Patch status is not yet confirmed by the vendor, but given the end-of-life status, remediation through patching is unlikely. Network administrators should consider isolating or decommissioning these devices to reduce exposure.