CVE-2025-11134 | Cudy TR1200 1.16.3-20230804-164635 Wireless Settings Page config SSID cross site scripting

September 28, 2025 Yanac

A vulnerability labeled as problematic has been found in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the file /cgi-bin/luci/admin/network/wireless/config/ of the component Wireless Settings Page. Such manipulation of the argument SSID leads to cross site scripting.

This vulnerability is referenced as CVE-2025-11134. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More