PT-2025-35126 · Tenda · Tenda Ac10

Plaid-Knot-11B · Published 2025-08-28 · Updated 2025-12-27 · CVE-2025-57219

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.09 multi TDE01

Description Incorrect access control in the /goform/ate endpoint allows attackers to escalate privileges or access sensitive components via a crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-57219

Affected Products

Tenda Ac10

References · 5

• https://osv.dev/vulnerability/CVE-2025-57219 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57219 · Security Note
• https://twitter.com/CVEnew/status/2005031799676686796 · Twitter Post
• https://t.me/CVEtracker/31158 · Telegram Post
• https://plaid-knot-11b.notion.site/Unauthenticated-Remote-Access-to-ate-Debug-Interface-via-Improper-Access-Controls-in-Tenda-AC10-V4-23fb3e9cce328050a479e44a8c217a72?source=copy_link · Note