CVE-2025-2959
CVSS 2.0 Score 6.1 of 10 (medium)
Details
Published Mar 30, 2025
Updated: Apr 15, 2025
CWE ID 404
CWE ID 476
Summary
CVE-2025-2959 is a recently disclosed vulnerability affecting TRENDnet TEW-410APB devices running version 1.3.06b. The issue lies within the HTTP Request Handler component and is classified as problematic. The vulnerability permits an attacker, located within the local network, to induce null pointer dereference in the function sub_4019A0 of the /usr/sbin/httpd file. While the exploit has been made public, the vendor has not responded to disclosure attempts, leaving users at risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- TRENDnet