CVE-2025-15076
Path Traversal Vulnerability in Tenda CH22 /public Component
Publication date: 2025-12-25
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ch22 | 1.0.0.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows unauthenticated remote attackers to bypass authentication and perform path traversal, potentially leading to unauthorized access to sensitive files and administrative functions. This compromises the confidentiality, integrity, and availability of the device, which could result in violations of data protection regulations such as GDPR and HIPAA that require safeguarding sensitive information and ensuring secure access controls. However, no specific compliance impact is detailed in the provided resources. [1, 2]
Can you explain this vulnerability to me?
CVE-2025-15076 is a critical path traversal vulnerability in the Tenda CH22 router version 1.0.0.1. It occurs because the router's security function improperly validates URLs that start with certain whitelisted prefixes like /public/. Attackers can craft URLs that include directory traversal sequences (e.g., ../) after the whitelisted prefix to access files outside the intended directory, bypassing authentication. This allows remote attackers to access sensitive files or functions on the device without authorization. [1, 2]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing unauthenticated remote attackers to gain unauthorized access to sensitive files and administrative functions on the Tenda CH22 router. This compromises the confidentiality, integrity, and availability of the device, potentially leading to full administrative control, unauthorized configuration changes, or disruption of service. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can be performed by monitoring HTTP requests to the Tenda CH22 router for suspicious URL patterns that start with whitelisted prefixes like '/public/' but include directory traversal sequences such as '../'. For example, inspecting web server logs or using network monitoring tools to identify requests like '/public/../../system_upgrade.asp' can indicate exploitation attempts. Commands such as 'grep "/public/.." /var/log/httpd/access.log' on the router or network logs may help identify such attempts. Additionally, using tools like Wireshark or tcpdump to capture HTTP traffic and filter for suspicious URL patterns can assist in detection. [2]
What immediate steps should I take to mitigate this vulnerability?
Currently, no known countermeasures or mitigations exist for this vulnerability. The recommended immediate step is to replace the affected Tenda CH22 router version 1.0.0.1 with an alternative device that is not vulnerable. Additionally, restricting remote access to the device and monitoring for exploitation attempts can help reduce risk until replacement is possible. [1]