CVE-2025-25523

medium

Description

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.

References

https://gist.github.com/XiaoCurry/cb190038c9402c9f89681a0e116996f6

Details

Source: Mitre, NVD

Published: 2025-02-11

Updated: 2025-05-23

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: Medium

EPSS

EPSS: 0.00018

Detections

Analytics