PT-2025-13630 · Trendnet · Trendnet Tew-818Dru
Zhongwei Gu
·
Publicado
2025-03-30
·
Atualizado
2025-07-18
·
CVE-2025-2958
CVSS v4.0
7.1
Alta
| Vetor | AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
TRENDnet TEW-818DRU version 1.0.14.6
Description
A vulnerability was found in the TRENDnet TEW-818DRU, affecting an unknown functionality of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Recommendations
As a temporary workaround, consider restricting access to the HTTP Request Handler component until a patch is available.
Avoid using the affected functionality of the file /usr/sbin/httpd until the issue is resolved.
Restrict access to the local network to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Trendnet Tew-818Dru