Vulnerability · Published Aug 21, 2025 · Assigned by VulDB

CVE-2025-9309Tenda AC10 MD5 Hash shadow hard-coded credentials

Low 2.5

In plain English

A low-severity hard-coded credentials in AC10 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)2.5Low

Exploit odds (30 days)0.2%top 87.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Performing manipulation results in hard-coded credentials. The attack needs to be approached locally. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The exploit has been made public and could be used.

Affected products (as reported)

Vendor	Product	Versions
Tenda	AC10	16.03.10.13

Weakness: CWE-798, CWE-259 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

References

VDB-320914 | Tenda AC10 MD5 Hash shadow hard-coded credentials vdb-entry
VDB-320914 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #633585 | Tenda Tenda Wi-Fi 5 Router AC10 AC10V4.0si_V16.03.10.13 Hard-coded Credentials third-party-advisory
https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC10/V4.0si_V16.03.10.13.md related
https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC10/V4.0si_V16.03.10.13.md#steps-to-reproduce exploit
https://www.tenda.com.cn/ product