CVE-2025-25664

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function

Critical · published February 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability awaits in the Tenda AC8V4, lurking through the shareSpeed parameter—an open invite for chaos! Think of it like a jam-packed elevator that's so full it can't hold any more people; a little push could send everything crashing down. In this case, the overflow could let attackers gain unauthorized access or disrupt your network entirely! An attacker exploiting this vulnerability could trigger a system crash or potentially execute arbitrary code, opening the door to total control over the device. The stakes are high, as this could lead to catastrophic network breaches or interruptions that disrupt your daily operations.

Put simply

Think of it like a jam-packed elevator that's so full it can't hold any more people; a little push could send everything crashing down. In this case, the overflow could let attackers gain unauthorized access or disrupt your network entirely! This stack overflow vulnerability in Tenda AC8V4 occurs in the sub_49E098 function when processing the shareSpeed parameter, allowing attackers to potentially manipulate memory and gain control.

What to do

An attacker exploiting this vulnerability could trigger a system crash or potentially execute arbitrary code, opening the door to total control over the device. The stakes are high, as this could lead to catastrophic network breaches or interruptions that disrupt your daily operations. Immediate action is required! Patch your Tenda AC8V4 to the latest firmware version to safeguard against this critical flaw. Ensure to monitor the network for any unauthorized access attempts while you're at it. You’ve got this! With this quick fix, you're one step closer to becoming a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Published
2025-02-20T00:00Z
EPSS history
Timeline
  • 20 FEB 00:00Z
    Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function
    cvelistv5