CVE-2025-29276

Proof of Concept (PoC): In the Diagnostics tab, access the Ping tool and, in the Host Address field, insert the following XSS payload:

<script>alert(1)</script>

Description: Submitting the payload directly in the Host Address field triggers a Reflected Cross-Site Scripting (XSS) vulnerability, as the input is returned unsanitized in the server’s response and executed in the browser.

Example steps to reproduce:

1. Log in to the router's administration page.
2. Navigate to Diagnostics → Ping.
3. In the Host Address field, enter the XSS payload.
4. Submit the request to trigger the payload execution in the response.

Evidence: The following images demonstrate the injection process and the payload execution in the affected page.