A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the …

A stack-based buffer overflow vulnerability has been discovered in TRENDnet TEW-432BRP router firmware version 3.10B20. The flaw exists in the formPortFw function within the /goform/formPortFw file, where manipulation of the server_name argument can trigger the overflow. This vulnerability can be exploited remotely and a public exploit is available. The affected product has been end-of-life since 2009, and the vendor has stated they will not provide fixes for this 15-year-old discontinued product. The vulnerability only affects unsupported legacy hardware that should be replaced.