CVE-2025-2959

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404 CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Mar 30, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-295925.6oasys v1.1 is vulnerable to Directory Traversal in ProcedureController.CVE-2025-295946.1A vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where user-controlled input is not adequately valida CVE-2025-29606.5A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub CVE-2025-296026.1flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.CVE-2025-296064.3py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.CVE-2025-29614.3A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file CVE-2025-29627.5A denial-of-service issue in the dns implemenation could cause an infinite loop.CVE-2025-296217.3Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Prefe CVE-2025-296257.8A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overl CVE-2025-296276.8An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authenticatio CVE-2025-296289.4A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home CVE-2025-296299.1Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak defa