High severity · published Dec 28, 2025
CVE-2025-15137
TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection
8.8
CVSS
11.4%
EPSS
No
On KEV
Description
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)11.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
TEW-800MB · TRENDnet
1.0.1.0 · source: vendor
TF
Tew-800mb Firmware · Trendnet
1.0.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15137
Exploit
https://pentagonal-time-3a7.notion.site/TRENDnet-TEW-800MB-NTP-2c7e5dd4c5a580f999adcaff2c31978b
Permissions Required
https://vuldb.com/?ctiid.338515
Third Party Advisory
https://vuldb.com/?id.338515
Third Party Advisory
https://vuldb.com/?submit.714241
More from TEW-800MB
8.8
CVE-2025-15136
TRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection
7.2
CVE-2024-0918
A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical