CVE-2025-8731criticalCWE-1392

CVE-2025-8731: critical vulnerability in TRENDnet TI-G160i

TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

Published · Updated

Follow this CVE+ Monitor TI-G160i+ Monitor TI-PG102i

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.8%
In short

TRENDnet network devices (TI-G160i, TI-PG102i, TPL-430AP) have default SSH credentials that could allow remote attackers to access the device without authorization. This is critical because SSH provides full control over the device's configuration and data.

Technical detail

The SSH service on affected TRENDnet devices uses default credentials that remain unchanged after deployment. An unauthenticated remote attacker can connect via SSH using these known credentials to gain unauthorized administrative access, potentially leading to complete device compromise. The vulnerability affects models TI-G160i, TI-PG102i, and TPL-430AP up to firmware version 20250724.

Summary generated and translated by AI from the official description.
A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains: "For product TI-PG102i and TI-G160i, by default, the product's remote management options are all disabled. The root account is for troubleshooting purpose and the password is encrypted. However, we will remove the root account from the next firmware release. For product TPL-430AP, the initial setup process requires user to set the password for the management GUI. Once that was done, the default password will be invalid."
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
TRENDnet · TI-G160iTRENDnet · TI-PG102iTRENDnet · TPL-430AP