CVE-2025-25428

TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

PT-2025-9122 · Trendnet · Trendnet Tew-929Dru

Name of the Vulnerable Software and Affected Versions: Trendnet TEW-929DRU version 1.0.0.10 Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability. This vulnerability can be exploited via the ssid key of the wifi data parameter on the "/captive portal.htm" API...

CVE-2025-25429

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the rname variable inside the havesamename function on the /addschedule.htm page...

CVE-2025-25429: Improper Neutralization of Input During Web Page Generation

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the rname variable inside the havesamename function on the /addschedule.htm page...

CVE-2025-25428

The TRENDnet TEW-929DRU wireless router, specifically version 1.0.0.10 , contains a hardcoded password vulnerability within the /etc/shadow file. This security flaw allows an attacker to bypass standard authentication and log in as the root user. To mitigate this risk, it is recommended to change...

PT-2025-9125

Name of the Vulnerable Software and Affected Versions Trendnet TEW-929DRU version 1.0.0.10 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It occurs via the r name variable inside the have same name function on the "/addschedule.htm" page. Recommendations For...

TRENDnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU version 1.0.0.10 suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the rname variable within the havesamename function on...

Trendnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the configname parameter of the /cbiaddcert.htm page, which can be exploited ...

TRENDnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the ssid key of the wifidata parameter on the /captiveportal.htm page, which...

CVE-2025-25431: Improper Neutralization of Input During Web Page Generation

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...

CVE-2025-25430: Improper Neutralization of Input During Web Page Generation

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the configname parameter on the /cbiaddcert.htm page...

CVE-2025-25429

The Trendnet TEW-929DRU wireless router (version 1.0.0.10 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient filtering and escaping of user-supplied data within the r_name variable inside the have_same_name function on the /addschedule.htm page. An attacker ...

TRENDnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...

CVE-2025-25428

TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2025-25430

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the configname parameter on the /cbiaddcert.htm page...

PT-2025-9121

Name of the Vulnerable Software and Affected Versions Trendnet TEW-929DRU version 1.0.0.10 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It can be exploited via the configname parameter on the "/cbi addcert.htm" API endpoint. Recommendations For Trendnet...

PT-2025-9124

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-929DRU version 1.0.0.10 Description A hardcoded password issue was found in the /etc/shadow file, allowing attackers to gain root access. Recommendations For version 1.0.0.10, consider changing the hardcoded password in the...

CVE-2025-25431

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...

CVE-2025-25428: Use of Hard-coded Password

TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

The vulnerability of the adm_add_user() function in the ssi service of TRENDnet TEW-821DAP allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the admadduser function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the escape of the operation outside the buffer in memory when processing the username parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code o...