Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-2960

Опубликовано: 30 мар. 2025
Источник: nvd
CVSS3: 6.5
CVSS2: 6.1
EPSS Низкий

Описание

A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file /bin/goahead of the component HTTP Request Handler. The manipulation leads to null pointer dereference. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:trendnet:tew-637ap_firmware:1.2.7:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-637ap:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:trendnet:tew-638apb_firmware:1.3.0.106:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-638apb:-:*:*:*:*:*:*:*

EPSS

Процентиль: 72%
0.00699
Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-404
CWE-476

Связанные уязвимости

CVSS3: 6.5
github
10 месяцев назад

A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file /bin/goahead of the component HTTP Request Handler. The manipulation leads to null pointer dereference. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.5
fstec
10 месяцев назад

Уязвимость демона обработчика HTTP-запросов httpd микропрограммного обеспечения беспроводных точек доступа TRENDnet TEW-637AP и TEW-638APB, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 72%
0.00699
Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-404
CWE-476