CVE-2025-15139: TRENDnet TEW-822DRE formWsc sub_43ACF4 command injection
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15139?
CVE-2025-15139 is classified as a critical vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-15139?
To fix CVE-2025-15139, update your TRENDnet TEW-822DRE router to the latest firmware version beyond 1.01B06.
What type of vulnerability is CVE-2025-15139?
CVE-2025-15139 is a command injection vulnerability that can be exploited remotely.
Which devices are affected by CVE-2025-15139?
CVE-2025-15139 affects the TRENDnet TEW-822DRE router running firmware versions 1.00B21 through 1.01B06.
Can CVE-2025-15139 be exploited without authentication?
Yes, CVE-2025-15139 can be exploited remotely without authentication.