Low severity1.9NVD Advisory· Published Sep 2, 2025· Updated Apr 29, 2026
CVE-2025-9806
CVE-2025-9806
Description
A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been publicly disclosed and may be utilized.
Affected products
3cpe:2.3:o:tenda:f1202_firmware:1.2.0.14:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:tenda:f1202_firmware:1.2.0.14:*:*:*:*:*:*:*
- cpe:2.3:o:tenda:f1202_firmware:1.2.0.20:*:*:*:*:*:*:*
- cpe:2.3:o:tenda:f1202_firmware:1.2.0.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/August829/Yu/blob/main/58ead8e7e08bfb0e9.mdnvdBroken Link
- github.com/August829/Yu/blob/main/58ead8e7e08bfb0e9.mdnvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
- www.tenda.com.cnnvdProduct
News mentions
0No linked articles in our index yet.