PT-2026-1521 · Trendnet · Trendnet Tew-713Re

Zephyr369 · Publicado 2026-01-06 · Atualizado 2026-02-12 · CVE-2025-15471

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-713RE version 1.02

Description A flaw exists in TRENDnet TEW-713RE that allows for remote operating system command injection. The issue is located in the /goformX/formFSrvX file, specifically through manipulation of the SZCMD parameter. Successful exploitation allows attackers to execute arbitrary commands on the system. The exploit is publicly available. The vendor was notified of the issue but did not provide a response.

Recommendations TRENDnet TEW-713RE version 1.02: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

OS Command Injection

Enumeração de Fraquezas

CWE-77

CWE-78

Identificadores relacionados

CVE-2025-15471

Produtos afetados

Trendnet Tew-713Re

Referências · 19

• 🔥 https://pentagonal-time-3a7.notion.site/Command-Injection-Vulnerability-in-formFSrvX-of-Trendnet-TEW-713RE-2d1e5dd4c5a5801481abe7a944763d39 · Exploit
• https://twitter.com/CveFindCom/status/2008722565045408046 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-15471 · Nota de Segurança
• https://t.me/pentestingnews/72175 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-15471 · Aviso do Fabricante
• https://t.me/CVEtracker/41558 · Publicação no Telegram
• https://vuldb.com/?submit.721441 · Nota
• https://twitter.com/CVEnew/status/2008658211281252860 · Publicação no Twitter
• https://twitter.com/gothburz/status/2008932817292411265 · Publicação no Twitter
• https://t.me/cveNotify/147919 · Publicação no Telegram
• https://vuldb.com/?id.339721 · Nota
• https://vuldb.com/?ctiid.339721 · Nota
• https://twitter.com/vuldb/status/2008921954636698020 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2008655035702325606 · Publicação no Twitter
• https://twitter.com/Karma_X_Inc/status/2009261122319270098 · Publicação no Twitter