CVE-2025-25668

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function

Critical · published February 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability hides in the Tenda AC8 V4 router's code, specifically through the shareSpeed parameter — and it could spell disaster! Think of it like overstuffing a suitcase until it bursts open; the router’s memory gets overwhelmed, and that can lead to chaos in the network! If exploited, an attacker could execute arbitrary code, effectively taking control of the router. This could mean intercepting your data, altering settings, or even cutting off your internet access entirely — a nightmarish scenario for any user!

Put simply

Think of it like overstuffing a suitcase until it bursts open; the router’s memory gets overwhelmed, and that can lead to chaos in the network! This vulnerability exists due to improper handling of the shareSpeed parameter in the sub_47D878 function, leading to a stack overflow that malicious actors can exploit to run arbitrary code.

What to do

If exploited, an attacker could execute arbitrary code, effectively taking control of the router. This could mean intercepting your data, altering settings, or even cutting off your internet access entirely — a nightmarish scenario for any user! Update your Tenda AC8 V4 router to the latest firmware version (V16.03.34.07 or later) immediately. Regularly check for updates and consider changing default credentials for enhanced security. You've got this! Take action now to secure your router and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Published
2025-02-20T00:00Z
EPSS history
Timeline
  • 20 FEB 00:00Z
    Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function
    cvelistv5