VulnerabilityAnalyzed
CVE-2025-9731
A vulnerability was determined in Tenda AC9 15.03.05.19.
LOW 1.1EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized.
- CVSS 4.0
- 1.1 LOWCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.14% probability · 4th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-259, CWE-798
- Affected
- tenda/ac9 firmware
- Source
- cna@vuldb.com
References
- https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e4.mdThird Party Advisory
- https://vuldb.com/?ctiid.322022Permissions Required
- https://vuldb.com/?id.322022Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.639748Third Party Advisory, VDB Entry
- https://www.tenda.com.cn/Product
- https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e4.mdThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.