CVE-2025-25430

Summary

CVE-2025-25430 is a stored Cross-site Scripting (XSS) vulnerability affecting the Trendnet TEW-929DRU 1.0.0.10 firmware. The issue lies within the /cbi_addcert.htm page, specifically the configname parameter. An attacker can exploit this flaw by injecting malicious scripts into the page, which are then stored and executed on unsuspecting users' browsers whenever they access the affected page. This can lead to information theft or even takeover of the user's account. Users are advised to update their firmware as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.