CVE-2025-8757 (CNNVD-202508-834)
中文标题:
TRENDnet TV-IP110WN 安全漏洞
英文标题:
TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation
漏洞描述
中文描述:
TRENDnet TV-IP110WN是美国趋势网络（TRENDnet）公司的一款无线网络摄像头。 TRENDnet TV-IP110WN 1.2.2版本存在安全漏洞，该漏洞源于文件/server/boa.conf存在最低权限违规问题。
英文描述:
A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| TRENDnet | TV-IP110WN | 1.2.2 | - | - |
cpe:2.3:a:trendnet:tv-ip110wn:1.2.2:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
CVSS评分详情
4.0 (cna)
HIGHCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
3.1 (cna)
HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
3.0 (cna)
HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
2.0 (cna)
MEDIUMAV:L/AC:H/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-8757 |
2025-11-11 15:23:37 | 2025-11-11 07:40:53 |
| NVD | nvd_CVE-2025-8757 |
2025-11-11 15:00:58 | 2025-11-11 07:48:39 |
| CNNVD | cnnvd_CNNVD-202508-834 |
2025-11-11 15:12:53 | 2025-11-11 08:00:09 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202508-834
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']