TROYANOSYVIRUS
← Back to CVEs

CVE-2025-25428

HIGH
8.0

Description

TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

CVE Details

CVSS v3.1 Score8.0
SeverityHIGH
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorADJACENT_NETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published2/28/2025
Last Modified5/21/2025
Sourcenvd
Honeypot Sightings0

Affected Products

trendnet:tew-929drutrendnet:tew-929dru_firmware

Weaknesses (CWE)

CWE-259

References

https://instinctive-acapella-fc7.notion.site/Trendnet-TEW-929DRU-Hardcoded-password-17815d9d4d2680d5a2becf32425d93fd(cve@mitre.org)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.