CVE-2025-29653

Summary

CVE-2025-29653 is a newly discovered SQL Injection vulnerability affecting the TP-Link M7450 4G LTE Mobile Wi-Fi Router with Firmware Version: 1.0.2 Build 170306 Rel.1015n. An attacker can exploit this unauthenticated vulnerability by injecting malicious SQL statements through the username and password fields, potentially gaining unauthorized access and control over the router's configuration. This issue poses a significant security risk, as it enables attackers to bypass authentication and manipulate the router's settings. Users are strongly encouraged to update their firmware to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.