VulnSocial

CVE-2025-70802Disclosure(tenda / g1)

LOWCVSS 8.4 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root.

tenda CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-259

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • g1
  • g1_firmware

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
tenda
Products
g1g1_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-23: 2Technical Details · 2026-03-23: 203-23
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2025-70802 Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root. https://www.cve.org/CVERecord?id=CVE-2025-70802 ----- Traducción: CVE-2025-70802 Tend… http://infoflow.cloud`

    Post summary

    The post identifies CVE-2025-70802 as a hardcoded password flaw in Tenda firmware that permits root access, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000040
    61 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-70802 Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root. https://www.cve.org/CVERecord?id=CVE-2025-70802

    Post summary

    The text announces a hardcoded password flaw in Tenda G1V3.1si firmware that permits root login, providing technical details but no exploitation or patch information.

    00000199
    56.8K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendag13.1--
OStendag1_firmware16.01.7.8--

Explore more

Back to dashboardtenda CVEsg1 vulnerabilities