BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-17

Assigner: MITRE

Description

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2025-11-17

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-63666

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	ac15_firmware	15.03.05.18
tenda	ac15	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability in Tenda AC15 firmware v15.03.05.18_multi involves the device issuing an authentication cookie that exposes the account password hash to the client. Additionally, the session identifier uses a short, low-entropy suffix, making it easier to guess. An attacker with network access or the ability to run JavaScript in a victim's browser can steal this cookie and replay it to gain unauthorized access to protected resources.

Impact Analysis

An attacker exploiting this vulnerability can steal authentication cookies and use them to access protected resources without authorization. This can lead to unauthorized access to the device or network, potentially compromising sensitive information or control over the device.

Hi! I’m here to help you understand CVE-2025-63666. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70