CVE-2025-2957 – TRENDnet TEW-411BRP+ HTTP Request httpd sub_401DB0 null pointer dereference

https://notcve.org/view.php?id=CVE-2025-2957

30 Mar 2025 — A vulnerability was found in TRENDnet TEW-411BRP+ 2.07. It has been classified as problematic. Affected is the function sub_401DB0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack can only be initiated within the local network. • https://docs.google.com/document/d/1NnvweBsYJQ0MGwBvpi5aAe69g8g5PaNL/edit#heading=h.gjdgxs • CWE-404: Improper Resource Shutdown or Release CWE-476: NULL Pointer Dereference •