A vulnerability labeled as critical has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function
sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection.
This vulnerability is documented as CVE-2025-15139. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
