CVE-2025-15371

Tenda i24 Shadow File hard-coded credentials

State: Published
Severity: 8.5 High
Published: Dec 31, 2025
Updated: Jan 2, 2026
Reserved: Dec 30, 2025

Description

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
3.0	7.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
2.0	6.8 Medium	AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-798 Hard-coded Credentials
CWE-259 Use of Hard-coded Password

Affected Products

Product	Versions
i24Tenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
4G03 ProTenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
4G05Tenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
4G08Tenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
G0-8G-PoETenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
Nova MW5GTenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected
TEG5328FTenda	1.0.0.35Affected 3.0.0.8(4008)Affected 04.03.01.49Affected 04.05.01.15Affected 04.08.01.28Affected 16.01.8.5Affected 65.10.15.6Affected

References

VDB-339075 | Tenda i24 Shadow File hard-coded credentialsvdb-entrytechnical-description
VDB-339075 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #727155 | Tenda Tenda i24v3.0 V3.0.0.8(4008) V3.0.0.8(4008) Hard-coded Credentialsthird-party-advisory
Submit #727283 | Tenda 4G03ProV1.0re V04.03.01.49 Hard-coded Credentials (Duplicate)third-party-advisory
Submit #727284 | Tenda 4G05V1.0re V04.05.01.15 Hard-coded Credentials (Duplicate)third-party-advisory
Submit #727285 | Tenda 4G08V1.0re V04.08.01.28 Hard-coded Credentials (Duplicate)third-party-advisory
Submit #727302 | Tenda G0-8G-PoEV2.0si V16.01.8.5 Hard-coded Credentials (Duplicate)third-party-advisory
Submit #727305 | Tenda MW5GV1.0re V1.0.0.35 Hard-coded Credentials (Duplicate)third-party-advisory
Submit #727306 | Tenda TEG5328FV1.0ma V65.10.15.6 Hard-coded Credentials (Duplicate)third-party-advisory
https://github.com/vuln-1/vuln/blob/main/Tenda/i24v3.0_V3.0.0.8/report-1.mdexploit
https://www.tenda.com.cn/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.