← All advisories

Medium severity4.8NVD Advisory· Published Feb 28, 2025· Updated Jun 17, 2026

CVE-2025-25430

CVE-2025-25430

Description

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page.

Affected products

3

Trendnet/Tew 929dru Firmware
cpe:2.3:o:trendnet:tew-929dru_firmware:1.0.0.10:*:*:*:*:*:*:*
Trendnet/TEW-929DRUcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0.0.10

Patches

Vulnerability mechanics

References

1

instinctive-acapella-fc7.notion.site/Trendnet-TEW-929DRU-XSS-17a15d9d4d2680fbb72ced0a02a64875nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.