CVE-2025-15137: TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function subF934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15137?
CVE-2025-15137 is classified as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-15137?
To fix CVE-2025-15137, users should update their TRENDnet TEW-800MB devices to the latest firmware version provided by the manufacturer.
What types of attacks can be executed using CVE-2025-15137?
CVE-2025-15137 allows for remote command injection, enabling attackers to execute arbitrary commands on the affected device.
Which devices are affected by CVE-2025-15137?
CVE-2025-15137 specifically affects the TRENDnet TEW-800MB version 1.0.1.0.
Is CVE-2025-15137 actively being exploited?
Yes, CVE-2025-15137 has been reported as publicly exploitable, making it critical for users to secure their devices promptly.