High severity · published Sep 1, 2025
CVE-2025-9778
A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948)
7.0
CVSS
0.1%
EPSS
No
On KEV
Description
A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
W12 Firmware · Tenda
3.0.0.6(3948) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-9778
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-9778
Not Applicable
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.md
Not Applicable
https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e8.md#steps-to-reproduce
Permissions Required
https://vuldb.com/?ctiid.322080
Third Party Advisory
https://vuldb.com/?id.322080
Third Party Advisory
https://vuldb.com/?submit.640969
Product
https://www.tenda.com.cn/
More from W12 Firmware
9.8
CVE-2025-11549
A vulnerability has been found in Tenda W12 3.0.0.6(3948)
9.8
CVE-2025-3693
A vulnerability was found in Tenda W12 3.0.0.5
8.8
CVE-2026-10192
Tenda W12 httpd set_local_time_0 stack-based overflow
8.8
CVE-2026-10191
Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow
8.8
CVE-2026-10189
Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow