The vulnerability of the /etc_ro/shadow file in the Tenda i24 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the /etcro/shadow file in the Tenda i24 wireless access point software lies in the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

EUVD-2025-208539

Tenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

Tenda i24 安全漏洞

The Tenda i24 is a wireless router produced by the Chinese company Tenda. The Tenda i24V3.0, with firmware version V3.0.0.5, has a security vulnerability. This vulnerability stems from hard-coded passwords in the /etc/rro/shadow file, which could allow attackers to log in as root...

CVE-2025-15371 Tenda i24 Shadow File hard-coded credentials

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. T...

CVE-2025-15371 Tenda i24 Shadow File hard-coded credentials

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. T...

Tenda多款产品 信任管理问题漏洞

Tenda i24 and others are products of Tenda, a Chinese company. tenda i24 is a wireless router. tenda 4G03 is a wireless router tenda 4G05 is a wireless router. A trust management issue vulnerability exists in various Tenda products.The vulnerability stems from incorrect operation of the Shadow Fi...

CVE-2025-15371: Use of Hard-coded Credentials

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. T...

EUVD-2025-12572

Malicious code in bioql PyPI...

EUVD-2025-11935

Malicious code in bioql PyPI...

EUVD-2025-11945

Malicious code in bioql PyPI...

EUVD-2024-53599

Malicious code in bioql PyPI...

CVE-2024-57483

Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function...

Tenda W12/i24 Buffer Overflow Vulnerability

The Tenda W12 and i24 is a wireless router made by Tenda. A buffer overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from a parameter json in /goform/modules that fails to properly validate the length and size of the input data, which can be exploited by an attacker ...

CVE-2025-4007

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

CVE-2025-4007

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

CVE-2025-4007

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

CVE-2025-4007 Tenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflow

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

CVE-2025-4007

Summary: CVE-2025-4007 affects Tenda W12 and i24 (versions 3.0.0.4–3.0.0.5). The vulnerability is in the httpd module’s function cgidhcpsCfgSet in /goform/modules. An attacker can remotely exploit a crafted json argument to trigger a stack-based buffer overflow, potentially enabling arbitrary cod...

CVE-2025-4007 Tenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflow

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack c...

Tenda i24和Tenda W12 安全漏洞

The Tenda W12 and i24 is a wireless router made by Tenda. A buffer overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from a parameter json in /goform/modules that fails to properly validate the length and size of the input data, which can be exploited by an attacker ...