CVE-2025-15139mediumCWE-74CWE-77

CVE-2025-15139: medium-severity vulnerability in TRENDnet TEW-822DRE

TRENDnet TEW-822DRE formWsc sub_43ACF4  command injection

Published · Updated

Follow this CVE+ Monitor TEW-822DRE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 13%
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4  of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
TRENDnet · TEW-822DRE
Related CVEs — TRENDnet TEW-822DRE

In the same product, most dangerous first.

CVE-2024-0920HIGHTRENDnet TEW-822DRE POST Request admin_ping.htm command injectionEPSS 8.6%CVE-2025-8758HIGHTRENDnet TEW-822DRE vsftpd least privilege violationEPSS 0.2%