Local Manipulation Vulnerability in Tenda F1202 Administrative Interface
CVE-2025-9806

1.8LOW

Key Information:

Vendor

Tenda
Status
F1202
Vendor
CVE Published:
2 September 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-9806?

A vulnerability present in the Tenda F1202 router's administrative interface allows for manipulation through an unknown function found in the /etc_ro/shadow file. This issue is primarily caused by the presence of hard-coded credentials, which can be exploited if an attacker gains local access. The exploitation requires a significant level of complexity and skill, making it challenging. This vulnerability has been publicly disclosed and poses a threat if leveraged appropriately by malicious actors.

Affected Version(s)

F1202 1.2.0.9

F1202 1.2.0.14

F1202 1.2.0.20

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-9806 - Proof of Concept

References

https://vuldb.com/?id.322130
vdb-entrytechnical-description
https://vuldb.com/?ctiid.322130
signaturepermissions-required
https://vuldb.com/?submit.640980
third-party-advisory

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yu Bao (VulDB User)
.