CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-05-05

Last modified

2025-05-05

Weaknesses

CWE-77, CWE-78

Affected products

• Ac9 Firmware (Tenda)

References

• https://github.com/Ghostsuzhijian/Iot-/blob/main/ac9_telnetd/rx3_telnetd.md