Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for TEG5328F by Tenda

    CVE-2025-15371 (GCVE-0-2025-15371)

    Vulnerability from nvd – Published: 2025-12-31 01:02 – Updated: 2026-01-02 14:38
    VLAI
    Title
    Tenda i24 Shadow File hard-coded credentials
    Summary
    A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-798 - Hard-coded Credentials
    • CWE-259 - Use of Hard-coded Password
    Assigner
    References
    URL Tags
    https://vuldb.com/?id.339075 vdb-entrytechnical-description
    https://vuldb.com/?ctiid.339075 signaturepermissions-required
    https://vuldb.com/?submit.727155 third-party-advisory
    https://vuldb.com/?submit.727283 third-party-advisory
    https://vuldb.com/?submit.727284 third-party-advisory
    https://vuldb.com/?submit.727285 third-party-advisory
    https://vuldb.com/?submit.727302 third-party-advisory
    https://vuldb.com/?submit.727305 third-party-advisory
    https://vuldb.com/?submit.727306 third-party-advisory
    https://github.com/vuln-1/vuln/blob/main/Tenda/i2… exploit
    https://www.tenda.com.cn/ product
    Impacted products
    Vendor Product Version
    Tenda i24 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G03 Pro Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G05 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G08 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda G0-8G-PoE Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda Nova MW5G Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda TEG5328F Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Credits
    vlun-1 (VulDB User)
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-15371",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-02T14:22:55.128847Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-02T14:38:01.600Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "modules": [
                "Shadow File"
              ],
              "product": "i24",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G03 Pro",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G05",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G08",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "G0-8G-PoE",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "Nova MW5G",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "TEG5328F",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "vlun-1 (VulDB User)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "Hard-coded Credentials",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-259",
                  "description": "Use of Hard-coded Password",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-12-31T01:02:06.989Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-339075 | Tenda i24 Shadow File hard-coded credentials",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/?id.339075"
            },
            {
              "name": "VDB-339075 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/?ctiid.339075"
            },
            {
              "name": "Submit #727155 | Tenda Tenda i24v3.0 V3.0.0.8(4008) V3.0.0.8(4008) Hard-coded Credentials",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727155"
            },
            {
              "name": "Submit #727283 | Tenda  4G03ProV1.0re V04.03.01.49 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727283"
            },
            {
              "name": "Submit #727284 | Tenda 4G05V1.0re V04.05.01.15 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727284"
            },
            {
              "name": "Submit #727285 | Tenda 4G08V1.0re V04.08.01.28 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727285"
            },
            {
              "name": "Submit #727302 | Tenda G0-8G-PoEV2.0si V16.01.8.5 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727302"
            },
            {
              "name": "Submit #727305 | Tenda MW5GV1.0re V1.0.0.35 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727305"
            },
            {
              "name": "Submit #727306 | Tenda TEG5328FV1.0ma V65.10.15.6 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727306"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/vuln-1/vuln/blob/main/Tenda/i24v3.0_V3.0.0.8/report-1.md"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://www.tenda.com.cn/"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-12-30T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2025-12-30T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2025-12-30T19:37:46.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Tenda i24 Shadow File hard-coded credentials"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2025-15371",
        "datePublished": "2025-12-31T01:02:06.989Z",
        "dateReserved": "2025-12-30T17:35:13.980Z",
        "dateUpdated": "2026-01-02T14:38:01.600Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2025-15371 (GCVE-0-2025-15371)

    Vulnerability from cvelistv5 – Published: 2025-12-31 01:02 – Updated: 2026-01-02 14:38
    VLAI
    Title
    Tenda i24 Shadow File hard-coded credentials
    Summary
    A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-798 - Hard-coded Credentials
    • CWE-259 - Use of Hard-coded Password
    Assigner
    References
    URL Tags
    https://vuldb.com/?id.339075 vdb-entrytechnical-description
    https://vuldb.com/?ctiid.339075 signaturepermissions-required
    https://vuldb.com/?submit.727155 third-party-advisory
    https://vuldb.com/?submit.727283 third-party-advisory
    https://vuldb.com/?submit.727284 third-party-advisory
    https://vuldb.com/?submit.727285 third-party-advisory
    https://vuldb.com/?submit.727302 third-party-advisory
    https://vuldb.com/?submit.727305 third-party-advisory
    https://vuldb.com/?submit.727306 third-party-advisory
    https://github.com/vuln-1/vuln/blob/main/Tenda/i2… exploit
    https://www.tenda.com.cn/ product
    Impacted products
    Vendor Product Version
    Tenda i24 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G03 Pro Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G05 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda 4G08 Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda G0-8G-PoE Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda Nova MW5G Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Tenda TEG5328F Affected: 1.0.0.35
    Affected: 3.0.0.8(4008)
    Affected: 04.03.01.49
    Affected: 04.05.01.15
    Affected: 04.08.01.28
    Affected: 16.01.8.5
    Affected: 65.10.15.6
    Create a notification for this product.
    Credits
    vlun-1 (VulDB User)
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-15371",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-02T14:22:55.128847Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-02T14:38:01.600Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "modules": [
                "Shadow File"
              ],
              "product": "i24",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G03 Pro",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G05",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "4G08",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "G0-8G-PoE",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "Nova MW5G",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            },
            {
              "modules": [
                "Shadow File"
              ],
              "product": "TEG5328F",
              "vendor": "Tenda",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.0.35"
                },
                {
                  "status": "affected",
                  "version": "3.0.0.8(4008)"
                },
                {
                  "status": "affected",
                  "version": "04.03.01.49"
                },
                {
                  "status": "affected",
                  "version": "04.05.01.15"
                },
                {
                  "status": "affected",
                  "version": "04.08.01.28"
                },
                {
                  "status": "affected",
                  "version": "16.01.8.5"
                },
                {
                  "status": "affected",
                  "version": "65.10.15.6"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "vlun-1 (VulDB User)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 8.5,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "Hard-coded Credentials",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-259",
                  "description": "Use of Hard-coded Password",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-12-31T01:02:06.989Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-339075 | Tenda i24 Shadow File hard-coded credentials",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/?id.339075"
            },
            {
              "name": "VDB-339075 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/?ctiid.339075"
            },
            {
              "name": "Submit #727155 | Tenda Tenda i24v3.0 V3.0.0.8(4008) V3.0.0.8(4008) Hard-coded Credentials",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727155"
            },
            {
              "name": "Submit #727283 | Tenda  4G03ProV1.0re V04.03.01.49 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727283"
            },
            {
              "name": "Submit #727284 | Tenda 4G05V1.0re V04.05.01.15 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727284"
            },
            {
              "name": "Submit #727285 | Tenda 4G08V1.0re V04.08.01.28 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727285"
            },
            {
              "name": "Submit #727302 | Tenda G0-8G-PoEV2.0si V16.01.8.5 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727302"
            },
            {
              "name": "Submit #727305 | Tenda MW5GV1.0re V1.0.0.35 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727305"
            },
            {
              "name": "Submit #727306 | Tenda TEG5328FV1.0ma V65.10.15.6 Hard-coded Credentials (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.727306"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/vuln-1/vuln/blob/main/Tenda/i24v3.0_V3.0.0.8/report-1.md"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://www.tenda.com.cn/"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2025-12-30T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2025-12-30T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2025-12-30T19:37:46.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Tenda i24 Shadow File hard-coded credentials"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2025-15371",
        "datePublished": "2025-12-31T01:02:06.989Z",
        "dateReserved": "2025-12-30T17:35:13.980Z",
        "dateUpdated": "2026-01-02T14:38:01.600Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }