CVE-2025-65202: TRENDnet Tew-657brm Firmware

High severity, CVSS 8.0. EPSS: 6.7% chance of exploitation in the next 30 days.

TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileges.

Affected products

• TRENDnet Tew-657brm Firmware: version 1.00.1 only

Published 2025-11-26. Last modified 2026-06-17.