CVE-2025-8757CWE-266CWE-272

TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation

High · published August 9, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00162 · 5.0th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-272 · Least Privilege Violation
Published
2025-08-09T15:02Z
EPSS history
Timeline
  • 09 AUG 15:02Z
    TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation
    cvelistv5