CVE-2025-2959: TRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereference
First published: Sun Mar 30 2025(Updated: )
A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TRENDnet TEW-410APB |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2959?
CVE-2025-2959 has been rated as problematic.
How does CVE-2025-2959 exploit the system?
CVE-2025-2959 allows attackers to manipulate the HTTP Request Handler, leading to a null pointer dereference.
What components are affected by CVE-2025-2959?
CVE-2025-2959 affects the TRENDnet TEW-410APB, specifically the function sub_4019A0 in the file /usr/sbin/httpd.
How can I mitigate CVE-2025-2959?
To mitigate CVE-2025-2959, ensure your TRENDnet TEW-410APB is updated to the latest firmware version.
Is there a fix available for CVE-2025-2959?
Yes, a firmware update is the recommended fix for CVE-2025-2959 to resolve the vulnerability.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/trendnet
- canonical/trendnet tew-410apb