PT-2025-32445 · Vsftpd+1 · Vsftpd+1

Tpchecker · Published 2025-07-28 · Updated 2025-08-09 · CVE-2025-8758

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-822DRE version FW103B02

Description: A vulnerability exists in TRENDnet TEW-822DRE FW103B02, affecting an unknown part of the vsftpd component. The issue results in a least privilege violation. Local access is required for exploitation, and the attack complexity is high. The exploit for this issue has been publicly disclosed. The vendor was informed about the disclosure but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

CWE-272

Related Identifiers

BDU:2025-09645

CVE-2025-8758

Affected Products

Trendnet Tew-822Dre

Vsftpd

References · 9

• 🔥 https://notion.so/23e54a1113e78009adc9d909b254812b · Exploit
• https://bdu.fstec.ru/vul/2025-09645 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8758 · Security Note
• https://twitter.com/CVEnew/status/1954223130601279556 · Twitter Post
• https://vuldb.com/?submit.624299 · Note
• https://vuldb.com/?ctiid.319263 · Note
• https://vuldb.com/?id.319263 · Note
• https://t.me/CVEtracker/29590 · Telegram Post
• https://t.me/cveNotify/131559 · Telegram Post