CVE-2025-25674

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid

Critical · published February 20, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

🔥 Hold onto your Wi-Fi! A buffer overflow vulnerability in Tenda AC10 routers could unleash chaos via the ssid parameter! Think of it as a crowded restaurant where one table is accidentally spilling over into the next, causing a domino effect that disrupts the entire dining experience. In this case, the overflow can crash the router, leading to complete loss of service. An attacker could exploit this vulnerability to crash the router or even execute arbitrary code, essentially turning your trusty device into a digital doormat! This means losing access to your network while also leaving it vulnerable to further attacks.

Put simply

Think of it as a crowded restaurant where one table is accidentally spilling over into the next, causing a domino effect that disrupts the entire dining experience. In this case, the overflow can crash the router, leading to complete loss of service. This buffer overflow vulnerability arises in the form_fast_setting_wifi_set function when processing the ssid parameter. When the input exceeds expected bounds, it can overwrite critical memory, leading to unexpected behavior or system crashes.

What to do

An attacker could exploit this vulnerability to crash the router or even execute arbitrary code, essentially turning your trusty device into a digital doormat! This means losing access to your network while also leaving it vulnerable to further attacks. Update your Tenda AC10 router firmware to version V15.03.06.24 or later immediately! If you're managing multiple devices, consider auditing your network to ensure all routers are running the latest firmware. Regularly review configurations to prevent further issues. You've got this! With these updates, you'll safeguard your network and earn your security hero badge! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Published
2025-02-20T00:00Z
EPSS history
Timeline
  • 20 FEB 00:00Z
    Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid
    cvelistv5