CVE-2025-8731CWE-1392

TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

Critical · published August 8, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

🚨 Default credentials are still lurking here! A remote attacker can exploit the SSH service on TRENDnet devices like TI-G160i and TPL-430AP, using factory-set usernames and passwords to gain access. 🔥 Think of it like leaving your front door wide open with a sign inviting anyone to come in for a cup of tea — the invitation is just too tempting! This vulnerability lets attackers stroll right in if those default credentials haven’t been changed. An attacker could seize control of your device, modify settings, or even launch attacks on your network. This could lead to unauthorized access to sensitive data and pose a serious threat to your entire network's security! The potential fallout is absolutely devastating.

Put simply

Think of it like leaving your front door wide open with a sign inviting anyone to come in for a cup of tea — the invitation is just too tempting! This vulnerability lets attackers stroll right in if those default credentials haven’t been changed. This vulnerability allows remote attackers to manipulate the SSH service by utilizing default credentials that remain unchanged, giving them unauthorized access to the system.

What to do

An attacker could seize control of your device, modify settings, or even launch attacks on your network. This could lead to unauthorized access to sensitive data and pose a serious threat to your entire network's security! The potential fallout is absolutely devastating. Immediately change default passwords on all affected TRENDnet devices. Ensure that remote management options are disabled where possible, and keep an eye out for firmware updates that will address these issues. Check your networks for any signs of unauthorized access. This is fixable! Follow these steps, and you’ll be well on your way to securing your devices and earning that security hero status! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00667 · 51.3th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-08-08T15:32Z
EPSS history
Timeline
  • 08 AUG 15:32Z
    TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials
    cvelistv5