PT-2025-37472 · Tenda · Tenda Ac9+1

Shiny

·

Published

2025-09-15

·

Updated

2025-09-15

·

CVE-2025-10443

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.05.14 Tenda AC9 version 15.03.05.18 Tenda AC15 version 15.03.05.14 Tenda AC15 version 15.03.05.18
Description A vulnerability exists in Tenda AC9 and AC15 devices. The vulnerability affects the formexeCommand function within the /goform/exeCommand file. Manipulation of the cmdinput argument can lead to a buffer overflow, allowing for remote exploitation.
Recommendations Tenda AC9 version 15.03.05.14: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Tenda AC9 version 15.03.05.18: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Tenda AC15 version 15.03.05.14: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Tenda AC15 version 15.03.05.18: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119CWE-120

Related Identifiers

CVE-2025-10443

Affected Products

Tenda Ac15
Tenda Ac9