CVE-2025-29384

Summary

CVE-2025-29384 is a stack overflow vulnerability affecting Tenda AC9 v1.0 V15.03.05.14_multi. The issue lies in the /goform/AdvSetMacMtuWan interface, specifically the wanMTU parameter. An attacker can exploit this vulnerability by sending maliciously crafted data, causing a stack overflow and leading to remote arbitrary code execution. This flaw poses a significant risk, as successful exploitation could result in unauthorized system access and potential data breaches. Users are strongly advised to update their Tenda AC9 devices to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.