The TRENDnet TEW‑432BRP 3.10B20 firmware suffers from a stack‑based buffer overflow (CWE‑119, CWE‑121) in the formSetPortTr function of /goform/formSetPortTr. By delivering a specially crafted special_name argument, an attacker can overflow the stack and execute arbitrary code. The flaw is exploitable remotely over the network, and the public exploit code has been released. Because the device has been End‑of‑Life since 2009, no patch is available from the vendor.

Only the TRENDnet TEW‑432BRP model running firmware 3.10B20 is affected. No other versions or revisions are listed. The product has been end‑of‑life since 2009 and is no longer supported by the vendor, meaning no vendor patch is available.

The CVSS score of 5.3 indicates a medium severity, but the public nature of the exploit and lack of vendor remediation raise the practical risk. The vulnerability can be triggered by sending a crafted HTTP request to /goform/formSetPortTr from any remote host that can reach the device. Its likelihood of exploitation is uncertain without an EPSS score, yet the presence of an exploit in public repositories suggests that motivated attackers could target exposed units. The device is not listed in the CISA KEV catalog, but that does not diminish the potential impact faced by users who still keep the device connected to untrusted networks.