CVE-2025-8979
Medium
Description
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function check_fw_type/split_fireware/check_fw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
SeverityMedium
CVSS6.6
Exploit probability—
ProductTenda Ac15 Firmware
PublishedAug 14, 2025
First seenAug 14, 2025
Weakness typeCWE-345CWE-345
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tenda ac15_firmware | 15.13.07.13 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.