Submit #727305: Tenda MW5GV1.0re V1.0.0.35 Hard-coded Credentialsinfo

TitleTenda MW5GV1.0re V1.0.0.35 Hard-coded Credentials
DescriptionTenda MW5GV1.0re V1.0.0.35 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root. By supplying the specific input an attacker can trigger the use of embedded hard-coded credentials. This vulnerability is restricted to local access and demands a sophisticated level of execution, making it relatively challenging to exploit. Nevertheless, the Proof of Concept (PoC) has been released to the public and could be weaponized.
Source⚠️ https://github.com/vuln-1/vuln/blob/main/Tenda/MW5GV1.0re_V1.0.0.35/report-1.md
User
 vlun-1 (UID 94005)
Submission12/30/2025 18:34 (10 months ago)
Moderation12/30/2025 19:32 (59 minutes later)
StatusDuplicate
VulDB entry339075 [Tenda i24 up to 65.10.15.6 Shadow File hard-coded credentials]
Points0

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!