PT-2025-6378 · Trendnet · Teg-40128 Web Smart Switch

Published 2025-02-11 · Updated 2025-02-11 · CVE-2025-25523

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Trendnet TEG-40128 Web Smart Switch version 1(1.00.023)

Description The issue is related to a buffer overflow vulnerability due to the lack of length verification in the mobile access point setup operation. This vulnerability allows an attacker to directly control the remote target device if successfully exploited.

Recommendations For Trendnet TEG-40128 Web Smart Switch version 1(1.00.023), consider disabling the mobile access point setup operation until a patch is available to prevent potential exploitation. Restrict access to the device to minimize the risk of remote takeover. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-25523

Affected Products

Teg-40128 Web Smart Switch

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-25523 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25523 · Vendor Advisory
• https://gist.github.com/XiaoCurry/cb190038c9402c9f89681a0e116996f6 · Note
• https://twitter.com/CVEnew/status/1889394885175693442 · Twitter Post
• https://t.me/cvedetector/17733 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1889401765499371572 · Twitter Post