CVE-2025-9806
published 2025-09-02CVE-2025-9806: A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component…
PriorityP431medium6.4CVSS 3.1
AVLACHPRHUINSUCHIHAH
EPSS
0.16%
4.5th percentile
A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been publicly disclosed and may be utilized.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | f1202 | — | — |
| tenda | f1202 | — | — |
| tenda | f1202 | — | — |
| tenda | f1202_firmware | — | — |
| tenda | f1202_firmware | — | — |
| tenda | f1202_firmware | — | — |
CVSS provenance
nvdv3.16.4MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.00.9LOWCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.00.8LOWAV:L/AC:H/Au:M/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20 Administrative Interface /etc_ro/shadow hard-coded credentials (EUVD-2025-26370)
vuldb·2026-10-02·CVSS 6.4
CVE-2025-9806 [MEDIUM] Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20 Administrative Interface /etc_ro/shadow hard-coded credentials (EUVD-2025-26370)
A vulnerability has been found in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20 and classified as problematic. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials.
The identification of this vulnerability is CVE-2025-9806. The attack can only be executed locally. Furthermore, there is an exploit available.
GHSA
GHSA-7x7v-wrpx-628j: A vulnerability was determined in Tenda F1202 1
ghsa_unreviewed·2025-10-21
CVE-2025-9806 [LOW] CWE-259 GHSA-7x7v-wrpx-628j: A vulnerability was determined in Tenda F1202 1
A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been publicly disclosed and may be utilized.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-02
Published