PT-2025-24573

CVE-2025-5900

Published

2025-06-06

Updated

2025-06-16

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.02.13

Description A problematic issue was found, affecting an unknown part of the system. The manipulation leads to cross-site request forgery, which can be initiated remotely.

Recommendations For Tenda AC9 version 15.03.02.13, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ysnysn0121

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

CWE-862: Missing Authorization

Related identifiers

CVE-2025-5900