Low severity1.9NVD Advisory· Published Sep 1, 2025· Updated Apr 29, 2026
CVE-2025-9778
CVE-2025-9778
Description
A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used.
Affected products
1- cpe:2.3:o:tenda:w12_firmware:3.0.0.6\(3948\):*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.mdnvdNot Applicable
- github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.mdnvdNot Applicable
- vuldb.comnvdPermissions RequiredVDB Entry
- www.tenda.com.cnnvdProduct
News mentions
0No linked articles in our index yet.