CVE-2025-8182 — Weak Password Requirements in Ac18

CWE-521 — Weak Password Requirements3 documents3 sources
Severity
6.3MEDIUMNVD
EPSS
0.1%
top 80.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda Ac18Tenda Ac18 Firmware
Timeline
PublishedJul 26

Description

A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ac1815.03.05.19
▶NVDtenda/ac18_firmware15.03.05.19

🔴Vulnerability Details

2
GHSA
GHSA-q8w8-6rfh-2mq4: A vulnerability has been found in Tenda AC18 15↗2025-07-26
▶
CVEList
Tenda AC18 Samba smb.conf weak password↗2025-07-26
▶
CVE-2025-8182 — Weak Password Requirements in Tenda | cvebase