PT-2025-35091 · Tenda · Tenda Ac1200+1

Published 2025-08-27 · Updated 2025-08-28 · CVE-2025-52054

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router versions 16.03.33.05

Description An issue exists where the root password of the device is calculated using a static string and the last two octets of the device's MAC address. This allows an unauthenticated attacker to authenticate with network services on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Using Hardcoded Credentials

Weakness Enumeration

CWE-287

CWE-798

Related Identifiers

BDU:2025-12459

CVE-2025-52054

Affected Products

Tenda Ac1200

Tenda Ac8

References · 5

• 🔥 https://virtualhackinglabs.com/advisories/cve-2025-52054-tenda-ac8-calculated-root-password · Exploit
• https://bdu.fstec.ru/vul/2025-12459 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-52054 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52054 · Vendor Advisory
• https://twitter.com/CVEnew/status/1961079489674575889 · Twitter Post