CVE-2025-15137 | TRENDnet TEW-800MB 1.0.1.0 NTPSyncWithHost.cgi sub_F934  command injection

A vulnerability categorized as critical has been discovered in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934  of the file NTPSyncWithHost.cgi. The manipulation results in command injection.

This vulnerability is cataloged as CVE-2025-15137. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.