PT-2025-20729 · Tenda · Tenda Ac10

Published 2025-03-16 · Updated 2025-06-13 · CVE-2025-44175

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC10 v4 version 16.03.10.13

Description The issue is related to a Buffer Overflow in the GetParentControlInfo function.

Recommendations For Tenda AC10 v4 version 16.03.10.13, consider disabling the GetParentControlInfo function until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-07213

CVE-2025-44175

Affected Products

Tenda Ac10

References · 8

• 🔥 https://github.com/xubeining/Cve_report/blob/main/The%20router%20Tenda%20AC10%20v4%20V16.03.10.13%20of%20Shenzhen%20Jixiang%20Tenda%20Technology%20Co.%2C%20Ltd.%20has%20a%20heap%20overflow%20vulnerability.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-44175 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44175 · Security Note
• https://bdu.fstec.ru/vul/2025-07213 · Security Note
• https://t.me/cvedetector/25114 · Telegram Post
• https://t.me/cvetracker/23645 · Telegram Post
• https://t.me/cvenotify/125623 · Telegram Post
• https://twitter.com/CVEnew/status/1921982200767250675 · Twitter Post