PT-2025-7563 · Tenda · Tenda Ac8V4

Published 2025-02-20 · Updated 2025-02-22 · CVE-2025-25664

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06

Description A stack overflow issue was discovered in the sub 49E098 function through the shareSpeed parameter. This issue allows for potential exploitation. No information is available regarding the estimated number of affected devices or real-world incidents.

Recommendations For Tenda AC8V4 version 16.03.34.06, consider disabling the sub 49E098 function as a temporary workaround until a patch is available. Restrict access to the shareSpeed parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

CVE-2025-25664

Affected Products

Tenda Ac8V4

References · 7

• 🔥 https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/SetIpMacBind.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25664 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25664 · Vendor Advisory
• https://twitter.com/CVEnew/status/1892706503431184798 · Twitter Post
• https://t.me/cvedetector/18609 · Telegram Post
• https://twitter.com/cybercronai/status/1893096061486370937 · Twitter Post
• https://twitter.com/CVETracker/status/1893028121386819868 · Twitter Post