We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-2959

TRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereference



Description

EN DE

A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Eine problematische Schwachstelle wurde in TRENDnet TEW-410APB 1.3.06b ausgemacht. Dies betrifft die Funktion sub_4019A0 der Datei /usr/sbin/httpd der Komponente HTTP Request Handler. Durch das Manipulieren mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff kann im lokalen Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.

Reserved 2025-03-29 | Published 2025-03-30 | Updated 2025-03-31 | Assigner VulDB


HIGH: 7.1CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
MEDIUM: 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
MEDIUM: 6.5CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.1AV:A/AC:L/Au:N/C:N/I:N/A:C

Problem types

NULL Pointer Dereference

Denial of Service

Product status

1.3.06b
affected

Timeline

2025-03-29:Advisory disclosed
2025-03-29:VulDB entry created
2025-03-29:VulDB entry last update

Credits

zhongwei gu (VulDB User) reporter

References

vuldb.com/?id.302012 (VDB-302012 | TRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereference) vdb-entry technical-description

vuldb.com/?ctiid.302012 (VDB-302012 | CTI Indicators (IOB, IOC, IOA)) signature permissions-required

vuldb.com/?submit.521725 (Submit #521725 | TRENDnet wi-fi access point firmware_tew_410apbplus_1.3.06b NULL Pointer Dereference) third-party-advisory

docs.google.com/.../d/1PcJZQ364MQxz1eUt6PLnWIQYTLNuJ5_3/edit related

drive.google.com/...Oxw2VIs2wcwdVOVLuqkG/view?usp=drive_link exploit

cve.org (CVE-2025-2959)

nvd.nist.gov (CVE-2025-2959)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-2959

Support options

Helpdesk Chat, Email, Knowledgebase