CVE-2025-8980: Tenda G1 Firmware Update check_upload_file data authenticity
A vulnerability has been found in Tenda G1 16.01.7.8(3660). Affected by this issue is the function checkuploadfile of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8980?
The severity of CVE-2025-8980 is considered high due to its potential for remote exploitation.
How do I fix CVE-2025-8980?
To fix CVE-2025-8980, ensure that you update the firmware of Tenda G1 to the latest version provided by the vendor.
What components are affected by CVE-2025-8980?
CVE-2025-8980 affects the Firmware Update Handler component of the Tenda G1 device.
Can CVE-2025-8980 be exploited remotely?
Yes, CVE-2025-8980 can be exploited remotely due to insufficient verification of data authenticity.
What type of vulnerability is CVE-2025-8980?
CVE-2025-8980 is classified as an insufficient verification of data authenticity vulnerability.