Vulnerability · Published Dec 28, 2025 · Assigned by VulDB
CVE-2025-15137TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection
High 8.8
In plain English
A high-severity command injection in TEW-800MB from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 11.4% (higher than 96% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)11.4%top 4.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-338515 | TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection vdb-entry, technical-description
- VDB-338515 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #714241 | TRENDnet TEW-800mb v1.0.1.0 Command Injection third-party-advisory
- https://pentagonal-time-3a7.notion.site/TRENDnet-TEW-800MB-NTP-2c7e5dd4c5a580f999adcaff2c31978b exploit