CVE-2025-25429

Name of the Vulnerable Software and Affected Versions Trendnet TEW-929DRU version 1.0.0.10

Description The issue is related to a Stored Cross-site Scripting (XSS) vulnerability. It occurs via the r name variable inside the have same name function on the "/addschedule.htm" page.

Recommendations For Trendnet TEW-929DRU version 1.0.0.10, as a temporary workaround, consider restricting access to the "/addschedule.htm" page until a patch is available. Avoid using the r name variable in the affected page until the issue is resolved.