TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.6%
exploitation probability
0.6%top 53% of all CVEs
observed exploitation
nono source reports it
In short
TRENDnet network devices (TI-G160i, TI-PG102i, TPL-430AP) have default SSH credentials that could allow remote attackers to access the device without authorization. This is critical because SSH provides full control over the device's configuration and data.
Technical detail
The SSH service on affected TRENDnet devices uses default credentials that remain unchanged after deployment. An unauthenticated remote attacker can connect via SSH using these known credentials to gain unauthorized administrative access, potentially leading to complete device compromise. The vulnerability affects models TI-G160i, TI-PG102i, and TPL-430AP up to firmware version 20250724.
Summary generated and translated by AI from the official description.
A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains: "For product TI-PG102i and TI-G160i, by default, the product's remote management options are all disabled. The root account is for troubleshooting purpose and the password is encrypted. However, we will remove the root account from the next firmware release. For product TPL-430AP, the initial setup process requires user to set the password for the management GUI. Once that was done, the default password will be invalid."
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P