CVE-2025-29118
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 19, 2025
Updated: Apr 1, 2025
CWE ID 121
Summary
CVE-2025-29118 is a newly identified vulnerability affecting the Tenda AC8 routers running version V16.03.34.06. Hackers can exploit this stack overflow issue by sending maliciously crafted data to the src parameter in the function sub_47D878, leading to unintended and potentially harmful behavior. Successful exploitation of this vulnerability may result in device crashes, unauthorized access, or even a complete takeover of the affected router. Users are strongly encouraged to update their software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd