PT-2025-32366 · Trendnet · Tpl-430Ap+2

Nich0Las · Published 2025-08-08 · Updated 2025-08-13 · CVE-2025-8731

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TI-G160i versions up to 20250724 TRENDnet TI-PG102i versions up to 20250724 TRENDnet TPL-430AP versions up to 20250724

Description A critical vulnerability exists in the SSH Service component of TRENDnet devices. The issue involves the use of default credentials, allowing for remote attacks. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations TRENDnet TI-G160i versions up to 20250724: Change the default credentials for the SSH Service immediately. TRENDnet TI-PG102i versions up to 20250724: Change the default credentials for the SSH Service immediately. TRENDnet TPL-430AP versions up to 20250724: Change the default credentials for the SSH Service immediately.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2025-8731

Affected Products

Ti-G160I

Ti-Pg102I

Tpl-430Ap

References · 12

• 🔥 https://github.com/Nicholas-wei/bug-discovery/blob/main/trendnet/TPL-430AP_FW1.0.1/trendnet_several_vulns.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8731 · Security Note
• https://vuldb.com/?id.319227 · Note
• https://t.me/cveNotify/132013 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953856907795390606 · Twitter Post
• https://vuldb.com/?submit.621749 · Note
• https://twitter.com/cracbot/status/1955585194653548668 · Twitter Post
• https://vuldb.com/?ctiid.319227 · Note
• https://twitter.com/CVEnew/status/1953848308952125537 · Twitter Post
• https://t.me/CVEtracker/29512 · Telegram Post
• https://twitter.com/CveFindCom/status/1953851233753583639 · Twitter Post
• https://twitter.com/offseq/status/1954082847871950861 · Twitter Post