Details of VAR-202511-0844

ID

VAR-202511-0844

CVE

CVE-2025-63834

TITLE

Shenzhen Tenda Technology Co.,Ltd. of AC18 Cross-site scripting vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-019486

DESCRIPTION

A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage. Shenzhen Tenda Technology Co.,Ltd. The Tenda AC18 is a dual-band wireless router launched in July 2016 by Shenzhen Jixiang Tenda Technology Co., Ltd., primarily targeting villa and large-apartment users

Trust: 2.16

sources: NVD: CVE-2025-63834 // JVNDB: JVNDB-2025-019486 // CNVD: CNVD-2025-28840

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-28840

AFFECTED PRODUCTS

vendor:	tenda	model:	ac18	scope:	eq	version:	15.03.05.05	Trust: 1.0
vendor:	tenda	model:	ac18	scope:	eq	version:	-	Trust: 0.8
vendor:	tenda	model:	ac18	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	ac18	scope:	eq	version:	ac18 firmware 15.03.05.05	Trust: 0.8
vendor:	tenda	model:	ac18 v15.03.05.05 multi	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-28840 // JVNDB: JVNDB-2025-019486 // NVD: CVE-2025-63834

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2025-63834
value:	MEDIUM
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-63834
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2025-63834
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2025-28840
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2025-28840
severity:	MEDIUM
baseScore:	5.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2025-63834
baseSeverity:	MEDIUM
baseScore:	5.4
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.3
impactScore:	2.7
version:	3.1
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2025-63834
baseSeverity:	MEDIUM
baseScore:	4.1
vectorString:	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	1.5
impactScore:	2.5
version:	3.1
Trust: 1.0
NVD:	CVE-2025-63834
baseSeverity:	MEDIUM
baseScore:	5.4
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-28840 // JVNDB: JVNDB-2025-019486 // NVD: CVE-2025-63834 // NVD: CVE-2025-63834

PROBLEMTYPE DATA

problemtype:	CWE-79	Trust: 1.0
problemtype:	Cross-site scripting (CWE-79) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-019486 // NVD: CVE-2025-63834

EXTERNAL IDS

db:	NVD	id:	CVE-2025-63834	Trust: 3.2
db:	JVNDB	id:	JVNDB-2025-019486	Trust: 0.8
db:	CNVD	id:	CNVD-2025-28840	Trust: 0.6

sources: CNVD: CNVD-2025-28840 // JVNDB: JVNDB-2025-019486 // NVD: CVE-2025-63834

REFERENCES

url:	https://github.com/babraink/cve_report/blob/main/cve_report/tenda/tendaac18/wifiset_ssid_xss/readme.md	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2025-63834	Trust: 0.8

sources: CNVD: CNVD-2025-28840 // JVNDB: JVNDB-2025-019486 // NVD: CVE-2025-63834

SOURCES

db:	CNVD	id:	CNVD-2025-28840
db:	JVNDB	id:	JVNDB-2025-019486
db:	NVD	id:	CVE-2025-63834

LAST UPDATE DATE

2025-11-23T23:55:05.825000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-28840	date:	2025-11-20T00:00:00
db:	JVNDB	id:	JVNDB-2025-019486	date:	2025-11-20T03:18:00
db:	NVD	id:	CVE-2025-63834	date:	2025-11-18T17:16:13.093

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-28840	date:	2025-11-19T00:00:00
db:	JVNDB	id:	JVNDB-2025-019486	date:	2025-11-20T00:00:00
db:	NVD	id:	CVE-2025-63834	date:	2025-11-10T17:15:35.810