#VU114329 Cleartext transmission of sensitive information in AC6 v5.0 AC1200 - CVE-2025-27564

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU114329

#VU114329 Cleartext transmission of sensitive information in AC6 v5.0 AC1200 - CVE-2025-27564

Published: August 21, 2025


Vulnerability identifier: #VU114329
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-27564
CWE-ID: CWE-319
Exploitation vector: Adjecent network
Exploit availability: No public exploit available
Vulnerable software:
AC6 v5.0 AC1200
Software vendor:
Shenzhen Tenda Technology Co.,Ltd.

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses insecure communication channel to transmit sensitive information in the web portal authentication functionality. A remote attacker with ability to intercept network traffic can gain access to sensitive data and bypass authentication on the target device.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links