RCE in Tenda Ac10
CVE-2025-0528
A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulat…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.009 (76.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tenda Ac10 — versions 16.03.10.20
- Tenda Ac18 — versions 16.03.10.20
- Tenda Ac8 — versions 16.03.10.20
Weakness classification (CWE)
References
- VDB-292412 | Tenda AC8/AC10/AC18 HTTP Request telnet command injection (vdb-entry)
- VDB-292412 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
- Submit #478175 | Tenda AC10v4.0 v16.03.10.20 Command Injection (third-party-advisory)
- github.com/Pr0b1em/IoT/blob/master/TendaAC10v16.03.10.20telnet.md (exploit)
- www.tenda.com.cn/ (product)
Frequently asked questions
- What is CVE-2025-0528?
- CVE-2025-0528 is a high-severity vulnerability in Tenda Ac10, classified under Command Injection. CVSS score: 7.2/10. Published 2025-01-17.
- How severe is CVE-2025-0528?
- High severity. CVSS v3 base score is 7.2 out of 10.