High severity · published Dec 28, 2025
CVE-2025-15136
TRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection
8.8
CVSS
10.7%
EPSS
No
On KEV
Description
A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)10.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
TEW-800MB · TRENDnet
1.0.1.0 · source: vendor
TF
Tew-800mb Firmware · Trendnet
1.0.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15136
Exploit
https://pentagonal-time-3a7.notion.site/TRENDnet-TEW-800MB-2c7e5dd4c5a58067bc81e530bf3191c0
Permissions Required
https://vuldb.com/?ctiid.338514
Third Party Advisory
https://vuldb.com/?id.338514
Third Party Advisory
https://vuldb.com/?submit.714042
More from TEW-800MB
8.8
CVE-2025-15137
TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection
7.2
CVE-2024-0918
A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical