Vulnerability Details CVE-2025-22949
Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.4%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-22949
-
cpe:2.3:h:tenda:ac9:1.0
-
cpe:2.3:o:tenda:ac9_firmware:15.03.05.19