CVE-2025-15471: TRENDnet TEW-713RE formFSrvX os command injection
A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: "The product in question TEW-731RE for CVE-2025-15471 has been discontinued and end of life since October 23, 2020. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on the website product support page and notify customers who registered their products with us." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15471?
CVE-2025-15471 is rated as a high severity vulnerability due to the potential for remote command injection.
How do I fix CVE-2025-15471?
To fix CVE-2025-15471, users should update their TRENDnet TEW-713RE firmware to the latest version available from the vendor.
What are the potential impacts of CVE-2025-15471?
The potential impacts of CVE-2025-15471 include unauthorized remote access and execution of arbitrary commands on the affected device.
Is CVE-2025-15471 easy to exploit?
Yes, CVE-2025-15471 is considered easy to exploit due to its remote nature and the lack of authentication required for the attack.
Who is affected by CVE-2025-15471?
Users of the TRENDnet TEW-713RE firmware version 1.02 are affected by CVE-2025-15471.