{"id":"CVE-2025-10107","state":"PUBLISHED","title":"TRENDnet TEW-831DR formSysCmd command injection","description":"A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of the argument sysHost leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2025-09-09T14:32:06.495Z","updatedAt":"2025-09-09T15:09:56.083Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["TRENDnet TEW-831DR"],"affected":[{"vendor":"TRENDnet","product":"TEW-831DR","versions":[{"version":"1.0 (601.130.1.1410)","status":"affected"}]}],"references":["https://vuldb.com/?id.323208","https://vuldb.com/?ctiid.323208","https://vuldb.com/?submit.636833","https://github.com/Darklab-limited/TRENDnet-AC1200-RCE/blob/main/TRENDnet%20Post-auth%20RCE.pdf"],"weaknesses":["CWE-77","CWE-74"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/10xxx/CVE-2025-10107.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-10107","state":"PUBLISHED","datePublished":"2025-09-09T14:32:06.495Z","dateUpdated":"2025-09-09T15:09:56.083Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-09-08T14:05:05.571Z"},"containers":{"cna":{"title":"TRENDnet TEW-831DR formSysCmd command injection","descriptions":[{"lang":"en","value":"A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of the argument sysHost leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Eine Schwachstelle wurde in TRENDnet TEW-831DR 1.0 (601.130.1.1410) gefunden. Es betrifft eine unbekannte Funktion der Datei /boafrm/formSysCmd. Durch Manipulation des Arguments sysHost mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Der Angriff kann remote ausgeführt werden. Der Exploit ist öffentlich verfügbar und könnte genutzt werden."}],"affected":[{"vendor":"TRENDnet","product":"TEW-831DR","versions":[{"version":"1.0 (601.130.1.1410)","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.323208","name":"VDB-323208 | TRENDnet TEW-831DR formSysCmd command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.323208","name":"VDB-323208 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.636833","name":"Submit #636833 | TRENDnet AC1200 Dual Band WiFi Router, model TEW-831DR Latest v1.0 (601.130.1.1410) Remote Code Execution","tags":["third-party-advisory"]},{"url":"https://github.com/Darklab-limited/TRENDnet-AC1200-RCE/blob/main/TRENDnet%20Post-auth%20RCE.pdf","tags":["broken-link"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.7,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.7,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5.8,"vectorString":"AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-09-09T14:32:06.495Z"},"timeline":[{"time":"2025-09-09T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-09-09T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-09-09T16:06:24.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Darklab.Limited (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://vuldb.com/?submit.636833","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-09T15:09:52.072503Z","id":"CVE-2025-10107","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-09T15:09:56.083Z"}}]}}}