CVE-2025-8979highCWE-345

CVE-2025-8979: falha de alta gravidade em Tenda AC15

Tenda AC15 Firmware Update check_fw data authenticity

Publicada em

Seguir esta CVE+ Monitorar AC15

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.4%
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function check_fw_type/split_fireware/check_fw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · AC15
CVEs relacionadas — Tenda AC15

No mesmo produto, das mais perigosas para as menos.

CVE-2025-10442MEDIUMTenda AC9/AC15 exeCommand formexeCommand os command injectionEPSS 9.2%CVE-2025-0566HIGHTenda AC15 SetDevNetName formSetDevNetName stack-based overflowEPSS 9.1%CVE-2025-5850HIGHTenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflowEPSS 6.4%CVE-2025-10443HIGHTenda AC9/AC15 exeCommand formexeCommand buffer overflowEPSS 4.6%CVE-2024-2812MEDIUMTenda AC15 WriteFacMac formWriteFacMac os command injectionEPSS 4.0%CVE-2024-2851MEDIUMTenda AC15 setsambacfg formSetSambaConf os command injectionEPSS 4.0%