CVE-2025-1851
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 119
CWE ID 121
Summary
CVE-2025-1851: A critical buffer overflow vulnerability was identified in the Tenda AC7 firmware version up to 15.03.06.44. This issue lies within the function formSetFirewallCfg in the file /goform/SetFirewallCfg, which can be exploited by manipulating the argument firewallEn. The exploit allows for stack-based buffer overflow and can be initiated remotely, posing a significant risk. The vulnerability has been publicly disclosed, increasing the potential for malicious attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Tenda AC7
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd