CVE-2025-57220

published 2025-08-28

CVE-2025-57220: An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a crafted UDP packet.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
tenda	ac10_firmware	—	—

CWE-20