CVE-2025-2956

Summary

CVE-2025-2956 is a vulnerability affecting TRENDnet TI-G102i models with software versions 1.0.7.S0 and 1.0.8.S0. This issue lies in the plugins_call_handle_uri_raw function of the /usr/sbin/lighttpd component, classified as a null pointer dereference. The exploitation can only occur within the local network, making it a potential risk for organizations utilizing these devices. The vulnerability has been publicly disclosed, increasing the likelihood of exploitation. Despite early notification, the vendor has not responded to the disclosure, leaving affected users without a patch or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.