CVE-2025-0528

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Jan 17, 2025
CWE ID 77
CWE ID 74

Summary

CVE-2025-0528 is a critical vulnerability affecting the Tenda AC8, AC10, and AC18 models with firmware version 16.03.10.20. This issue resides within an unknown functionality of the file /goform/telnet in the HTTP Request Handler component. An attacker can exploit this vulnerability through remote manipulation, leading to command injection. The exploit for this vulnerability has been disclosed publicly, increasing the risk for potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • AC 8
  • Tenda AC10

Affected Vendors

  • Shenzhen Tenda Technology Co. Ltd

Advisories, Assessments, and Mitigations