CNNVD-202508-1776 Information

CNNVD ID

CNNVD-202508-1776

CVE-2025-8979

  • CNNVD Published: 2025-08-14

Description (Chinese)

Tenda AC15是中国腾达(Tenda)公司的一款无线路由器。 Tenda AC15 15.13.07.13版本存在数据伪造问题漏洞,该漏洞源于固件更新处理组件中函数check_fw_type/split_fireware/check_fw的数据真实性验证不足。

Description (English)

Tenda AC15 is a wireless router of Tenda, China. The version of Tenda AC15.15.13.07.13 contains a gap in data forgery, which arises from the insufficient validation of data authenticity in the solidware update processing component for function check fw type/split fireware/check fw.

Hazard Level

High

Vulnerability Type

数据伪造问题

Affected Vendor

腾达

Published

2025-08-14

Last Modified

2026-02-24

References

https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/AC15_Inte.md https://vuldb.com/?ctiid.319975 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/AC15_Auth.md https://www.tenda.com.cn/ https://vuldb.com/?submit.628603 https://vuldb.com/?submit.628602 https://vuldb.com/?id.319975 https://access.redhat.com/security/cve/cve-2025-8979 https://nvd.nist.gov/vuln/detail/CVE-2025-8979

Share on: