Sign-up

ID

VAR-202507-2610


CVE

CVE-2025-8182


TITLE

Shenzhen Tenda Technology Co.,Ltd.  of  AC18  Weak password requirement vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652

DESCRIPTION

A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Shenzhen Tenda Technology Co.,Ltd

Trust: 1.62

sources: NVD: CVE-2025-8182 // JVNDB: JVNDB-2025-010652

AFFECTED PRODUCTS

vendor:tendamodel:ac18scope:eqversion:15.03.05.19

Trust: 1.0

vendor:tendamodel:ac18scope:eqversion: -

Trust: 0.8

vendor:tendamodel:ac18scope:eqversion:ac18 firmware 15.03.05.19

Trust: 0.8

vendor:tendamodel:ac18scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652 // NVD: CVE-2025-8182

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-8182
value: LOW

Trust: 1.0

nvd@nist.gov: CVE-2025-8182
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-010652
value: HIGH

Trust: 0.8

cna@vuldb.com: CVE-2025-8182
severity: MEDIUM
baseScore: 5.1
vectorString: AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 4.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-010652
severity: MEDIUM
baseScore: 5.1
vectorString: AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

cna@vuldb.com: CVE-2025-8182
baseSeverity: MEDIUM
baseScore: 5.6
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 2.2
impactScore: 3.4
version: 3.1

Trust: 1.0

nvd@nist.gov: CVE-2025-8182
baseSeverity: HIGH
baseScore: 7.4
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: 2.2
impactScore: 5.2
version: 3.1

Trust: 1.0

NVD: JVNDB-2025-010652
baseSeverity: HIGH
baseScore: 7.4
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652 // NVD: CVE-2025-8182 // NVD: CVE-2025-8182

PROBLEMTYPE DATA

problemtype:CWE-521

Trust: 1.0

problemtype:Weak password request (CWE-521) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652 // NVD: CVE-2025-8182

EXTERNAL IDS

db:NVDid:CVE-2025-8182

Trust: 2.6

db:VULDBid:317596

Trust: 1.8

db:JVNDBid:JVNDB-2025-010652

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652 // NVD: CVE-2025-8182

REFERENCES

url:https://vuldb.com/?id.317596

Trust: 1.8

url:https://vuldb.com/?submit.621977

Trust: 1.8

url:https://www.notion.so/23a54a1113e7802abfabf1275a555f48

Trust: 1.8

url:https://www.tenda.com.cn/

Trust: 1.8

url:https://vuldb.com/?ctiid.317596

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-8182

Trust: 0.8

sources: JVNDB: JVNDB-2025-010652 // NVD: CVE-2025-8182

SOURCES

db:JVNDBid:JVNDB-2025-010652
db:NVDid:CVE-2025-8182

LAST UPDATE DATE

2025-08-06T23:19:01.004000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2025-010652date:2025-08-05T07:04:00
db:NVDid:CVE-2025-8182date:2025-08-01T20:05:29.587

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2025-010652date:2025-08-05T00:00:00
db:NVDid:CVE-2025-8182date:2025-07-26T09:15:26.730