PT-2025-13629 · Trendnet · Trendnet Tew-411Brp+
Zhongwei Gu
·
Publicado
2025-03-30
·
Atualizado
2025-03-30
·
CVE-2025-2957
CVSS v2.0
6.1
Média
| Vetor | AV:A/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
TRENDnet TEW-411BRP+ version 2.07
Description
A vulnerability was found in the HTTP Request Handler component, specifically affecting the function
sub 401DB0 of the file /usr/sbin/httpd. This issue leads to a null pointer dereference. The attack can only be initiated within the local network.Recommendations
For TRENDnet TEW-411BRP+ version 2.07, as a temporary workaround, consider disabling the
sub 401DB0 function until a patch is available. Restrict access to the /usr/sbin/httpd file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Resource Release
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Trendnet Tew-411Brp+