PT-2025-35091

CVE-2025-52054

·

Published

2025-08-27

·

Updated

2026-09-26

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router versions 16.03.33.05
Description An issue exists where the root password of the device is calculated using a static string and the last two octets of the device's MAC address. This allows an unauthenticated attacker to authenticate with network services on the device.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-798: Use of Hard-coded Credentials
CWE-287: Improper Authentication
Related identifiers
CVE-2025-52054
BDU:2025-12459
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com