Lucene search
+L

7 matches found

CNVD
CNVD
•added 2026/01/12 12:00 a.m.•14 views

TRENDnet TEW-800MB Command Injection Vulnerability

The TRENDnet TEW-800MB is a dual-band wireless router from TRENDnet. The TRENDnet TEW-800MB suffers from a command injection vulnerability that originates from a misbehavior of the function subF934 in the file NTPSyncWithHost.cgi, which can be exploited by an attacker to execute arbitrary command...

9CVSS7.6AI score0.11373EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/12/29 12:00 a.m.•12 views

The vulnerability of the sub_F934() function in the Wi-Fi adapter software developed by TRENDnet TEW-800MB allows a hacker to execute arbitrary commands.

The vulnerability of the subF934 function in the TRENDnet TEW-800MB Wi-Fi adapter software relates to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests...

9CVSS7.6AI score0.11373EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2025/12/28 3:30 p.m.•12 views

EUVD-2025-205511

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function subF934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS8.7AI score0.11373EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/28 2:16 p.m.•10 views

CVE-2025-15137

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function subF934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

8.7CVSS5.6AI score0.11373EPSS
SaveExploits1References4
NVD
NVD
•added 2025/12/28 2:16 p.m.•12 views

CVE-2025-15137

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function subF934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS0.11373EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/28 12:00 a.m.•2 views

CVE-2025-15137: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function subF934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was...

9CVSS7.7AI score0.11373EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/28 12:00 a.m.•12 views

TRENDnet TEW-800MB 命令注入漏洞

The TRENDnet TEW-800MB is a dual-band wireless router from TRENDnet. The TRENDnet TEW-800MB suffers from a command injection vulnerability that originates from a misbehavior of the function subF934 in the file NTPSyncWithHost.cgi, which can be exploited by an attacker to execute arbitrary command...

9CVSS7.5AI score0.11373EPSS
SaveExploits1References5
Rows per page
Query Builder