PT-2025-53682 · Tenda · Tenda Ac10
Yhryhryhr_Miemie
·
Publicado
2025-12-28
·
Atualizado
2026-01-04
·
CVE-2025-15218
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda AC10U versions 15.03.06.48 through 15.03.06.49
Description
A buffer overflow issue exists in the Tenda AC10U. The vulnerability is located in the
fromadvsetlanip function within the /goform/AdvSetLanip file, specifically within the POST Request Parameter Handler component. Manipulation of the lanMask argument can trigger the buffer overflow, allowing for remote exploitation. The exploit for this issue has been publicly released.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the
/goform/AdvSetLanip file to minimize the risk of exploitation.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Tenda Ac10