CVE-2025-8758: TRENDnet TEW-822DRE vsftpd least privilege violation
A vulnerability was found in TRENDnet TEW-822DRE FW103B02. It has been classified as problematic. This affects an unknown part of the component vsftpd. The manipulation leads to least privilege violation. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8758?
CVE-2025-8758 has been classified as problematic due to its potential for least privilege violation.
How do I fix CVE-2025-8758?
To fix CVE-2025-8758, ensure that your TRENDnet TEW-822DRE device is updated to the latest firmware version.
What components are affected by CVE-2025-8758?
CVE-2025-8758 affects the TRENDnet TEW-822DRE router and an unspecified component of vsftpd.
What type of attack is associated with CVE-2025-8758?
CVE-2025-8758 is associated with local attacks that require the attacker to have physical access to the device.
What is the complexity of an attack for CVE-2025-8758?
The complexity of an attack exploiting CVE-2025-8758 is considered rather high.