Tenda AC18 Firmware CVE-2025-8182

Q: What is the CVSS score of CVE-2025-8182?

CVE-2025-8182 has a CVSS 4.0 base score of 2.9 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Weak Password Requirements (CWE-521)

2025-07-26 cna@vuldb.com

Information Disclosure Brute Force Tenda Ac18 Firmware

2.9

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 29, 2026 - 01:48 vuln.today

DescriptionNVD

A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as problematic. This vulnerability affects unknown code of the file /etc_ro/smb.conf of the component Samba. The manipulation leads to weak password requirements. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

AnalysisAI

Weak password requirements in Tenda AC18 firmware version 15.03.05.19 allow remote attackers to conduct brute-force attacks against Samba authentication via the /etc_ro/smb.conf configuration file. The vulnerability requires high attack complexity and has been publicly disclosed, though exploitation difficulty remains elevated. CVSS 2.9 and EPSS 0.07% (20th percentile) indicate low real-world risk despite proof-of-concept availability.

Technical ContextAI

The vulnerability resides in the Samba file-sharing service configuration as exposed through the Tenda AC18 router's web interface or file system. Samba uses smb.conf to define password policies and authentication constraints. CWE-521 (Weak Password Requirements) indicates insufficient password complexity enforcement, validation, or policy restrictions within the Samba daemon's configuration. The affected CPE (cpe:2.3:o:tenda:ac18_firmware:15.03.05.19) specifies the exact firmware version where this misconfiguration exists. Remote network access to the Samba service, combined with weak credential enforcement, enables enumeration and brute-force attacks that would be infeasible against properly configured systems.

RemediationAI

Upgrade Tenda AC18 firmware to a version newer than 15.03.05.19 if available from Tenda's official support channels (https://www.tenda.com.cn/). Verify the patched firmware version on the Tenda product page or contact Tenda support for release notes confirming CWE-521 remediation. If no patched firmware is available for your device model, implement network-level compensating controls: restrict network access to the Samba service (TCP/UDP port 139, 445) using router firewall rules or network segmentation, allowing only trusted internal clients; disable SMB sharing entirely if not required for functionality; enable account lockout policies if the firmware's Samba configuration permits (modify smb.conf password policies manually if accessible). Monitor Samba logs for repeated authentication failures as an indicator of brute-force attempts. Note that firmware upgrades may reset configuration, so document current Samba settings before patching.

CVE-2025-8182 vulnerability details – vuln.today

Back