cbcvebase.
CVE-2025-65202
published 2025-11-26

CVE-2025-65202: TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters…

PriorityP261high8CVSS 3.1
AVAACLPRLUINSUCHIHAH
EPSS
7.21%
93.5th percentile
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileges.

Affected

1 ranges
VendorProductVersion rangeFixed in
trendnettew-657brm_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.