Trendnet Tew-929dru Firmware
4 CVEs affecting Trendnet Tew-929dru Firmware. Latest disclosed: 2025-02-28. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25428 | High | 8.0 | 2025-02-28 | TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. |
CVE-2025-25429 | Medium | 4.8 | 2025-02-28 | Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name function on the /adds… |
CVE-2025-25431 | Medium | 4.8 | 2025-02-28 | Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the /captive_portal.htm… |
CVE-2025-25430 | Medium | 4.8 | 2025-02-28 | Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page. |