SSH Service Vulnerability in TRENDnet Devices
CVE-2025-8731

9.3CRITICAL

Key Information:

Vendor

Trendnet

Status
Ti-g160i
Ti-pg102i
Tpl-430ap
Vendor
CVE Published:
8 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-8731?

A security vulnerability exists in the SSH Service of TRENDnet devices including the TI-G160i, TI-PG102i, and TPL-430AP, allowing attackers to exploit default credentials. This flaw facilitates unauthorized remote access, enabling potential manipulation by malicious actors. Despite prior notifications of the issue, there has been no response from TRENDnet regarding the resolution of this vulnerability, increasing the urgency for users to secure their devices against possible exploitation.

Affected Version(s)

TI-G160i 20250724

TI-PG102i 20250724

TPL-430AP 20250724

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-8731 - Proof of Concept

References

https://vuldb.com/?id.319227
vdb-entry
https://vuldb.com/?ctiid.319227
signaturepermissions-required
https://vuldb.com/?submit.621749
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

nich0las (VulDB User)
.
CVE-2025-8731 : SSH Service Vulnerability in TRENDnet Devices