CNNVD-202512-4881 Information

CNNVD ID

CNNVD-202512-4881

CVE-2025-15136

  • CNNVD Published: 2025-12-28

Description (Chinese)

TRENDnet TEW-800MB是美国趋势网络(TRENDnet)公司的一款双频无线路由器。 TRENDnet TEW-800MB 1.0.1.0版本存在命令注入漏洞,该漏洞源于文件/goform/wizardset中参数WizardConfigured的错误操作,可能导致命令注入。

Description (English)

TRENDnet TEW-800MB is a dual-frequency wireless router for Trendnet. Version 1.0.1.0 of TRENDnet TEW-800MB contains a command injection loophole, which stems from the error of WizardConfigured, the parameter in document/goform/wizardset, which may lead to the command injection.

Hazard Level

Medium

Vulnerability Type

命令注入

Affected Vendor

趋势网络

Published

2025-12-28

Last Modified

2026-02-24

References

https://pentagonal-time-3a7.notion.site/TRENDnet-TEW-800MB-2c7e5dd4c5a58067bc81e530bf3191c0 https://vuldb.com/?ctiid.338514 https://vuldb.com/?submit.714042 https://vuldb.com/?id.338514 https://access.redhat.com/security/cve/cve-2025-15136

Share on: