PT-2025-24398 · Tenda · Tenda Ac5

Yhryhryhr_Miemie

·

Published

2025-06-06

·

Updated

2025-06-14

·

CVE-2025-5863

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Tenda AC5 version 15.03.06.47
Description A critical issue was found, classified as critical, affecting the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to a stack-based buffer overflow. This issue can be exploited remotely.
Recommendations For Tenda AC5 version 15.03.06.47, as a temporary workaround, consider disabling the formSetRebootTimer function until a patch is available. Restrict access to the /goform/SetRebootTimer endpoint to minimize the risk of exploitation. Avoid using the rebootTime argument in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-787CWE-121CWE-119

Related Identifiers

BDU:2025-06720
CVE-2025-5863

Affected Products

Tenda Ac5