CVE-2025-8980 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the function check_upload_file of the component Firmware Update Handler. T…
Medium CVSS: 6.6

CVE-2025-8980

A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the function check_upload_file of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Vendor
Tenda
Product
G1 Firmware
CWE
CWE-345
Yayın Tarihi
2025-08-14 20:15:38
Güncelleme
2025-08-18 15:04:02
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-345 G1 Firmware MEDIUM Tenda 2025

Referanslar

https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/G1_Auth.md https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/G1_Inte.md https://vuldb.com/?ctiid.319976 https://vuldb.com/?id.319976 https://vuldb.com/?submit.628605 https://vuldb.com/?submit.628606 https://www.tenda.com.cn/