CVE-2025-25457

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 17, 2025
Updated: Apr 22, 2025
CWE ID 121

Summary

CVE-2025-25457 is a newly identified vulnerability affecting the Tenda AC10 V4.0si_V16.03.10.20 firmware. This issue allows an attacker to execute a buffer overflow attack on the AdvSetMacMtuWan function through the cloneType2 parameter. Successful exploitation could result in arbitrary code execution, leading to potential unauthorized access or system takeover. Network administrators are advised to update their Tenda AC10 devices to the latest firmware to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share