CVE-2025-15472

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be use...

CVE-2025-15472

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be...

CVE-2025-15472

TRENDnet TEW-811DRU firmware 1.0.2.0 is affected by an OS command injection in httpd/uapply.cgi setDeviceURL. Manipulation of the DeviceURL argument enables remote command execution with high impact. Exploit is published; vendor did not respond to disclosure. There is no publicly documented fix/u...

CVE-2025-15472 TRENDnet TEW-811DRU httpd  uapply.cgi setDeviceURL  os command injection

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be...

CVE-2025-15472 TRENDnet TEW-811DRU httpd  uapply.cgi setDeviceURL  os command injection

A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be...

PT-2026-1523

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-811DRU version 1.0.2.0 Description A flaw exists in TRENDnet TEW-811DRU version 1.0.2.0 related to the setDeviceURL function within the uapply.cgi file of the httpd component. Manipulation of the DeviceURL argument can lead to...

Linksys RE6500 Arbitrary Command Execution

The vulnerability of the setDeviceURL function /goform/setDeviceURL of the Linksys RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000 router microprogramming software lies in the manipulation of the DeviceURL argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2025-5441

A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The manipulation of the argument DeviceURL...

CVE-2025-5441

Affected devices: Linksys RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000 with firmware versions 1.0.013.001 through 1.2.07.001. Root cause: the function setDeviceURL in /goform/setDeviceURL accepts a DeviceURL argument whose manipulation enables OS command injection. Impact: remote exploitati...

CVE-2025-5441 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection

A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The manipulation of the argument DeviceURL...

CVE-2025-5441: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setDeviceURL of the file /goform/setDeviceURL. The manipulation of the argument DeviceURL...

Linksys’ various products have command injection vulnerabilities

Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE6250 is a wireless extender.Linksys RE6500 is a wireless extender. A command injection vulnerability exists in various Linksys products, which stems from an incorrect operation of...

PT-2025-49561

Уязвимость функции setDeviceURL /goform/setDeviceURL микропрограммного обеспечения маршрутизаторов Linksys RE6500, RE6250, RE6300, RE6350, RE7000 и RE9000 связана с манипулированием аргументом DeviceURL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить...