CVE-2025-63666: Critical severity Tenda Ac15 vulnerability
Tenda AC15 v15.03.05.18multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63666?
CVE-2025-63666 is classified as a high-severity vulnerability due to the potential for account takeover through cookie theft.
How do I fix CVE-2025-63666?
To fix CVE-2025-63666, it is recommended to update the Tenda AC15 router to the latest firmware that addresses this vulnerability.
What are the implications of CVE-2025-63666?
Exploitation of CVE-2025-63666 can lead to unauthorized access to user accounts and sensitive data through stolen authentication cookies.
Who is affected by CVE-2025-63666?
CVE-2025-63666 affects users of the Tenda AC15 router using firmware v15.03.05.18_multi.
How does CVE-2025-63666 expose user credentials?
CVE-2025-63666 exposes user credentials by issuing an authentication cookie containing the account password hash, which can be stolen by attackers.