PT-2025-13630 · Trendnet · Trendnet Tew-818Dru

Zhongwei Gu

·

Published

2025-03-30

·

Updated

2025-07-18

·

CVE-2025-2958

CVSS v4.0

7.1

High

VectorAV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-818DRU version 1.0.14.6
Description A vulnerability was found in the TRENDnet TEW-818DRU, affecting an unknown functionality of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Recommendations As a temporary workaround, consider restricting access to the HTTP Request Handler component until a patch is available. Avoid using the affected functionality of the file /usr/sbin/httpd until the issue is resolved. Restrict access to the local network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-10552
CVE-2025-2958

Affected Products

Trendnet Tew-818Dru