CVE-2025-2960

Summary

CVE-2025-2960 is a newly disclosed vulnerability affecting TRENDnet TEW-637AP and TEW-638APB devices running firmware versions 1.2.7/1.3.0.106. The issue lies in the sub_41DED0 function of the /bin/goahead HTTP Request Handler component, which results in null pointer dereference. An attacker must have access to the local network to leverage this vulnerability. Unfortunately, the exploit for CVE-2025-2960 has been made public, increasing the risk for potential attacks. Despite early disclosure, the vendor has not responded to reports about this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.