WhereisRain/TEW-657BRM

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-65202 ↗	Nov 26, 2025Wednesday, 26 November 2025, 21:15	8 HIGH	—
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileges.