PT-2025-53682 · Tenda · Tenda Ac10

Yhryhryhr_Miemie

·

CVE-2025-15218

·

Published

2025-12-28

·

Updated

2026-01-04

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda AC10U versions 15.03.06.48 through 15.03.06.49
Description A buffer overflow issue exists in the Tenda AC10U. The vulnerability is located in the fromadvsetlanip function within the /goform/AdvSetLanip file, specifically within the POST Request Parameter Handler component. Manipulation of the lanMask argument can trigger the buffer overflow, allowing for remote exploitation. The exploit for this issue has been publicly released.
Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/AdvSetLanip file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-120CWE-119

Related Identifiers

BDU:2026-00446
CVE-2025-15218

Affected Products

Tenda Ac10