CVE-2025-25428
CVSS 3.1 Score 8 of 10 (high)
Details
Published Feb 28, 2025
Updated: Mar 4, 2025
CWE ID 259
Summary
CVE-2025-25428 is a newly disclosed vulnerability affecting the TRENDnet TEW-929DRU 1.0.0.10 firmware. This issue involves a hardcoded password in the /etc/shadow file, which provides unauthorized access to the root account for attackers who can exploit this weakness. Unauthorized login as root grants broad system privileges, increasing the risk of data theft or unintended changes to critical system configurations. Users are strongly urged to update their TRENDnet devices as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.