PT-2025-30970 · Samba+1 · Samba+1

Tpcchecker · Published 2025-07-24 · Updated 2025-07-26 · CVE-2025-8182

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19

Description A vulnerability exists in the Tenda AC18 device due to weak password requirements. The issue affects unknown code within the /etc ro/smb.conf file of the Samba component and can be exploited remotely. Exploitation is considered difficult. The exploit has been publicly disclosed.

Recommendations Update to a newer version that addresses the weak password requirements. Consider temporarily restricting access to the Samba component to mitigate the risk.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

BDU:2025-09114

CVE-2025-8182

Affected Products

Samba

Tenda Ac18

References · 10

• 🔥 https://notion.so/23a54a1113e7802abfabf1275a555f48 · Exploit
• https://bdu.fstec.ru/vul/2025-09114 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8182 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8182 · Security Note
• https://twitter.com/CVEnew/status/1949028965730996721 · Twitter Post
• https://vuldb.com/?submit.621977 · Note
• https://vuldb.com/?id.317596 · Note
• https://tenda.com.cn · Note
• https://notion.so/Misconfiguration-in-Tenda-AC18-23a54a1113e7802abfabf1275a555f48 · Note
• https://vuldb.com/?ctiid.317596 · Note