Record status Published
Identifier year (not publication year) 2025
Source publication Dec 31, 2025
Source updated Jan 2, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Tenda i24 Shadow File hard-coded credentials
A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
i24
Vendor Tenda
Product i24
Platforms Unknown
Default status Unknown
i24 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
4G03 Pro
Vendor Tenda
Product 4G03 Pro
Platforms Unknown
Default status Unknown
4G03 Pro · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
4G05
Vendor Tenda
Product 4G05
Platforms Unknown
Default status Unknown
4G05 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
4G08
Vendor Tenda
Product 4G08
Platforms Unknown
Default status Unknown
4G08 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
G0-8G-PoE
Vendor Tenda
Product G0-8G-PoE
Platforms Unknown
Default status Unknown
G0-8G-PoE · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
Nova MW5G
Vendor Tenda
Product Nova MW5G
Platforms Unknown
Default status Unknown
Nova MW5G · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed
TEG5328F
Vendor Tenda
Product TEG5328F
Platforms Unknown
Default status Unknown
TEG5328F · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 1.0.0.35 affectedUnavailable Unavailable Unavailable None listed 3.0.0.8(4008) affectedUnavailable Unavailable Unavailable None listed 04.03.01.49 affectedUnavailable Unavailable Unavailable None listed 04.05.01.15 affectedUnavailable Unavailable Unavailable None listed 04.08.01.28 affectedUnavailable Unavailable Unavailable None listed 16.01.8.5 affectedUnavailable Unavailable Unavailable None listed 65.10.15.6 affectedUnavailable Unavailable Unavailable None listed