CVE-2025-8182 Details
Description
A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
A vulnerability exists in the Tenda AC18 router running version 15.03.05.19, specifically within the Samba component. The issue arises from an insecure configuration in the Samba configuration file, /etc_ro/smb.conf, which allows accounts with null passwords to be accessed. This misconfiguration can be exploited remotely, enabling unauthorized access to shared resources without proper authentication. Such access could result in information disclosure or unauthorized manipulation of data.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 28, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://vuldb.com/?ctiid.317596 | [email protected] | Permissions Required |
| https://vuldb.com/?id.317596 | [email protected] | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.621977 | [email protected] | Third Party AdvisoryVDB Entry |
| https://www.notion.so/23a54a1113e7802abfabf1275a555f48 | [email protected] | Third Party Advisory |
| https://www.tenda.com.cn/ | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-521 | Weak Password Requirements | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tenda ac18 firmware | 15.03.05.19 |
CPE
Remediation
| |
| tenda ac18 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Aug 1, 2025 | Initial Analysis | [email protected] |
| Jul 26, 2025 | New CVE Received | [email protected] |