CVE-2025-9828

Katalog CVE

CVSS 5.9 · Medium EPSS 0,34%

Kerentanan Cryptographic Issues pada tenda cp6 firmware. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was determined in Tenda CP6 11.10.00.243. The affected element is the function sub_2B7D04 of the component uhttp. Executing manipulation can lead to risky cryptographic algorithm. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized.

Rincian

Terbit di NVD

2 September 2025

Terakhir diubah

30 September 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-310: Cryptographic Issues
CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/CP6.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.322175 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.641566 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.322175 permissions required · vdb entry
• https://www.tenda.com.cn/ product