CVE-2025-52054CWE-287

CVE-2025-52054

Medium · published August 28, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-08-28T19:16Z
Affected products (1)
ProductVersionsFixed in
tenda/ac8_firmware≤ 16.03.33.05—
References (1)
https://www.virtualhackinglabs.com/advisories/cve-2025-52054-tenda-ac8-calculated-root-password/ · [email protected]
EPSS history
Timeline
  • 28 AUG 00:00Z
    An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05
    cvelistv5