CVE-2025-0528

🗓️ 17 Jan 2025 14:31:07Reported by VulDBType

Critical vulnerability in Tenda AC8, AC10, and AC18 allows remote command injection attacks.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-0528	17 Jan 202514:39	–	circl
CNNVD	Tenda AC10 注入漏洞	17 Jan 202500:00	–	cnnvd
CNVD	Tenda AC10 Command Injection Vulnerability	23 Jan 202500:00	–	cnvd
Cvelist	CVE-2025-0528 Tenda AC8/AC10/AC18 HTTP Request telnet command injection	17 Jan 202514:31	–	cvelist
EUVD	EUVD-2025-1737	3 Oct 202520:07	–	euvd
NVD	CVE-2025-0528	17 Jan 202515:15	–	nvd
Positive Technologies	PT-2025-1260 · Tenda · Tenda Ac10 +2	9 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-0528	6 Feb 202502:13	–	redhatcve
Vulnrichment	CVE-2025-0528 Tenda AC8/AC10/AC18 HTTP Request telnet command injection	17 Jan 202514:31	–	vulnrichment

NVD

Vulners

Node

tenda ac8_firmwareMatch16.03.10.20

AND

tenda ac8Match-

Node

tenda ac10_firmwareMatch16.03.10.20

AND

tenda ac10Match-

Node

tenda ac18_firmwareMatch16.03.10.20

AND

tenda ac18Match-

[
  {
    "vendor": "Tenda",
    "product": "AC8",
    "versions": [
      {
        "version": "16.03.10.20",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP Request Handler"
    ]
  },
  {
    "vendor": "Tenda",
    "product": "AC10",
    "versions": [
      {
        "version": "16.03.10.20",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP Request Handler"
    ]
  },
  {
    "vendor": "Tenda",
    "product": "AC18",
    "versions": [
      {
        "version": "16.03.10.20",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
github	www.github.com/Pr0b1em/IoT/blob/master/TendaAC10v16.03.10.20telnet.md

28 May 2025 14:42Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

CVSS 28.3

CVSS 48.6

CVSS 37.2

EPSS0.00916

SSVC

tenda vulnerability command injection remote access