PT-2025-35477 · Tenda · Tenda W12

Yu Bao · Published 2025-09-01 · Updated 2025-09-01 · CVE-2025-9778

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda W12 versions prior to 3.0.0.7

Description A security issue has been identified in Tenda W12. The issue involves hard-coded credentials within the file /etc ro/shadow of the Administrative Interface component. Exploitation requires local access and is considered difficult. The exploit has been publicly disclosed.

Recommendations Update Tenda W12 to version 3.0.0.7 or later.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2025-9778

Affected Products

Tenda W12

References · 10

• 🔥 https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.md · Exploit
• 🔥 https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.md#steps-to-reproduce · Exploit
• https://osv.dev/vulnerability/CVE-2025-9778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9778 · Security Note
• https://vuldb.com/?id.322080 · Note
• https://twitter.com/CVEnew/status/1962493223462400504 · Twitter Post
• https://vuldb.com/?ctiid.322080 · Note
• https://tenda.com.cn · Note
• https://t.me/CVEtracker/31426 · Telegram Post
• https://vuldb.com/?submit.640969 · Note