Trendnet Tew-929dru Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Trendnet Tew-929dru Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-25428 — CVSS 8.0 (high): TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in…
• CVE-2025-25429 — CVSS 4.8 (medium): Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name…
• CVE-2025-25430 — CVSS 4.8 (medium): Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the…
• CVE-2025-25431 — CVSS 4.8 (medium): Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the…