CVE-2025-65202: OS Command Injection
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "nextfile," which allows an attacker to execute arbitrary commands with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65202?
CVE-2025-65202 is classified as a high-severity vulnerability due to its potential for authenticated remote OS command injection.
How do I fix CVE-2025-65202?
To fix CVE-2025-65202, update the TRENDnet TEW-657BRM firmware to the latest version provided by the vendor.
What are the consequences of exploiting CVE-2025-65202?
Exploiting CVE-2025-65202 allows attackers to execute arbitrary commands with root privileges, potentially compromising the entire system.
Who is affected by CVE-2025-65202?
The CVE-2025-65202 vulnerability affects users of the TRENDnet TEW-657BRM wireless router running firmware version 1.00.1.
How can I detect if my system is vulnerable to CVE-2025-65202?
You can detect vulnerability to CVE-2025-65202 by checking for access to the setup.cgi binary and reviewing the HTTP parameters used during interactions.