CVE-2025-25455
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 17, 2025
Updated: Apr 22, 2025
CWE ID 121
Summary
CVE-2025-25455 is a newly discovered vulnerability affecting the Tenda AC10 V4.0si_V16.03.10.20 wireless router firmware. The issue lies in the AdvSetMacMtuWan function, which can be exploited through the wanMTU2 setting to trigger a Buffer Overflow attack. Successful exploitation may result in unauthorized remote code execution or denial-of-service attacks. Users of the affected device are advised to update their firmware as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd