TRENDnet Tew-800mb Firmware vulnerabilities

3 CVEs affecting TRENDnet Tew-800mb Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15137, published 2025-12-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0918, published 2024-01-26. High severity, CVSS 7.2. EPSS: 25.4% chance of exploitation in the next 30 days. A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the…
CVE-2025-15137, published 2025-12-28. High severity, CVSS 8.8. EPSS: 11.4% chance of exploitation in the next 30 days. A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection.…
CVE-2025-15136, published 2025-12-28. High severity, CVSS 8.8. EPSS: 10.7% chance of exploitation in the next 30 days. A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The…