CVE-2025-25454

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 17, 2025
Updated: Apr 22, 2025
CWE ID 121

Summary

CVE-2025-25454: A buffer overflow vulnerability has been identified in the Tenda AC10 V4.0si_V16.03.10.20 firmware. This issue arises when processing data in the AdvSetMacMtuWan function through the wanSpeed2 interface. An attacker can exploit this vulnerability by sending specially crafted packets, resulting in memory corruption and potential code execution. This could lead to unauthorized access, data theft, or other malicious activities. Users are advised to update their firmware as soon as a patch is available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share