CVE-2025-8980

MEDIUM EPSS 23.1%
Published Aug 14, 202510mo ago · Modified Jun 17, 20261w ago
6.6 CVSS 4.0
Medium
Find Similar
Published Aug 14, 2025 10mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the function check_upload_file of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

CVSS Details

Base Score
6.6
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity High
Privileges Required High
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
23.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-345

Affected Products 2

VendorProductVersionRange
tendag1_firmware16.01.7.8\(3660\)any
tendag1*any

References 7

  • github.com https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/G1_Auth.md
    Third Party Advisory
  • github.com https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/G1_Inte.md
    Third Party Advisory
  • vuldb.com https://vuldb.com/?ctiid.319976
    Permissions Required
  • vuldb.com https://vuldb.com/?id.319976
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.628605
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.628606
    Third Party AdvisoryVDB Entry
  • tenda.com.cn https://www.tenda.com.cn/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.