A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulat…

A stack-based buffer overflow vulnerability has been discovered in TRENDnet TEW-432BRP 3.10B20 router. The flaw exists in the formSetUrlFilter function of the /goform/formSetUrlFilter file, where manipulation of the keyword_list/keyword argument causes the overflow. The vulnerability can be exploited remotely and exploit code has been publicly released. The vendor has stated they will not fix this issue as the product has been end-of-life since 2009, leaving affected devices permanently vulnerable.