CNNVD-202512-4877 Information
CNNVD ID
CNNVD-202512-4877
Related CVE
- CNNVD Published: 2025-12-28
Description (Chinese)
TRENDnet TEW-822DRE是美国趋势网络（TRENDnet）公司的一款双频无线路由器。 TRENDnet TEW-822DRE 1.00B21版本和1.01B06版本存在命令注入漏洞，该漏洞源于文件/boafrm/formWsc中参数peerPin的错误操作，可能导致命令注入。
Description (English)
TRENDnet TEW-822DRE is a double-frequency wireless router for Trendnet. TRENDnet TEW-822DRE 1.00B21 and 1.01B06 have a command-injecting loophole, which results from the error of the PierPin parameter in the document/boafrm/formWsc, which may lead to the command-injection.
Hazard Level
High
Vulnerability Type
命令注入
Affected Vendor
趋势网络
Published
2025-12-28
Last Modified
2026-02-24
References
https://vuldb.com/?id.338517 https://vuldb.com/?submit.715131 https://pentagonal-time-3a7.notion.site/TRENDnet-TEW-822DRE-Command-Injection-2c9e5dd4c5a580f190e9c411ad627e9a#2c9e5dd4c5a5801dae7ad20828639d4b https://vuldb.com/?ctiid.338517 https://access.redhat.com/security/cve/cve-2025-15139
Share on: