PT-2025-35130 · Tenda · Tenda Ac10

Published 2025-08-28 · Updated 2025-12-27 · CVE-2025-57220

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC10 versions 16.03.10.09 multi TDE01

Description An input validation flaw exists in the 'ate' service that allows for privilege escalation to root via a crafted UDP packet.

Recommendations Update to a newer firmware version to address this issue.

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-57220

Affected Products

Tenda Ac10

References · 6

• https://osv.dev/vulnerability/CVE-2025-57220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57220 · Security Note
• https://plaid-knot-11b.notion.site/Unauthenticated-Remote-Root-Shell-via-Input-Validation-Flaw-in-ate-Service-on-Tenda-AC10-V4-0-23fb3e9cce32804d93aad7e79a82a7aa?source=copy_link · Note
• https://t.me/CVEtracker/31159 · Telegram Post
• https://t.me/cveNotify/133861 · Telegram Post
• https://twitter.com/CVEnew/status/2005031800532336701 · Twitter Post