CVE-2025-29100

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list

Critical · published March 24, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in Tenda AC8 could turn your router into an open door for attackers! 🔥 Think of it as a delivery person who takes a package meant for a locked room and delivers it to anyone with the right address, completely ignoring the security measures in place. When data flows in unchecked, it can flood the system and cause chaos! With this vulnerability, an attacker could exploit the router to execute arbitrary code, allowing them to take control of your network devices. This could mean unauthorized access to personal data, the ability to change network settings, or even worse—compromising your entire home network!

Put simply

Think of it as a delivery person who takes a package meant for a locked room and delivers it to anyone with the right address, completely ignoring the security measures in place. When data flows in unchecked, it can flood the system and cause chaos! This critical buffer overflow occurs in the `fromSetRouteStatic` function when handling the parameter list, allowing attackers to manipulate memory and execute malicious code.

What to do

With this vulnerability, an attacker could exploit the router to execute arbitrary code, allowing them to take control of your network devices. This could mean unauthorized access to personal data, the ability to change network settings, or even worse—compromising your entire home network! To protect your network, update your Tenda AC8 firmware to the latest version immediately, as this will patch the vulnerability. Regularly check for firmware updates to ensure ongoing protection against new vulnerabilities. Additionally, consider implementing network segmentation to limit access to sensitive devices. You've got this! Follow these steps, and you'll fortify your network like a security pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2025-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list
    cvelistv5