CVE-2025-29385
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 14, 2025
Updated: Mar 19, 2025
CWE ID 787
Summary
CVE-2025-29385 is a stack overflow vulnerability affecting Tenda AC9 v1.0 V15.03.05.14_multi. The issue lies in the /goform/AdvSetMacMtuWan endpoint, where the cloneType parameter can be manipulated to trigger a buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code remotely. This poses a significant risk to affected devices and requires immediate patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Shenzhen Tenda Technology Co. Ltd