CVE-2025-2959 – TRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereference

https://notcve.org/view.php?id=CVE-2025-2959

30 Mar 2025 — A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. • https://docs.google.com/document/d/1PcJZQ364MQxz1eUt6PLnWIQYTLNuJ5_3/edit#heading=h.gjdgxs • CWE-404: Improper Resource Shutdown or Release CWE-476: NULL Pointer Dereference •