CVE-2025-11134: Cudy TR1200 Wireless Settings config cross site scripting
A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the file /cgi-bin/luci/admin/network/wireless/config/ of the component Wireless Settings Page. Such manipulation of the argument SSID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11134?
CVE-2025-11134 has been classified as a cross-site scripting vulnerability, which can lead to serious security risks like data theft.
How do I fix CVE-2025-11134?
To fix CVE-2025-11134, ensure that your Cudy TR1200 device is updated to the latest firmware version that addresses this vulnerability.
Who is affected by CVE-2025-11134?
CVE-2025-11134 affects users of the Cudy TR1200 device running version 1.16.3-20230804-164635.
What is the impact of CVE-2025-11134?
The impact of CVE-2025-11134 is that it allows attackers to execute arbitrary scripts within the context of a user's session through the Wireless Settings Page.
Can CVE-2025-11134 be exploited remotely?
Yes, CVE-2025-11134 can potentially be exploited remotely if an attacker can manipulate the SSID argument in the affected component.