CVE-2025-29135

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using…

Critical · published March 24, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

🚨 A remote stack overflow vulnerability is lurking in Tenda AC7 that could let attackers execute arbitrary code with the right security parameter — yikes! 🔥 Think of it as a delivery driver who gets the wrong address and accidentally drops off a package full of chaos instead of your new WiFi router. One small mistake allows them to open the door to your network and unleash havoc! An attacker could take complete control of your Tenda AC7 device, allowing them to potentially access sensitive data, modify settings, or even launch attacks on other devices connected to your network. This is absolutely devastating for your cybersecurity!

Put simply

Think of it as a delivery driver who gets the wrong address and accidentally drops off a package full of chaos instead of your new WiFi router. One small mistake allows them to open the door to your network and unleash havoc! This stack-based buffer overflow flaw in the formWifiBasicSet function allows remote attackers to overflow the stack and inject malicious code, bypassing system security mechanisms. If exploited, it can lead to complete system compromise.

What to do

An attacker could take complete control of your Tenda AC7 device, allowing them to potentially access sensitive data, modify settings, or even launch attacks on other devices connected to your network. This is absolutely devastating for your cybersecurity! It's vital to patch your Tenda AC7 immediately to version V15.03.06.45 to close this vulnerability. Additionally, regularly review your router settings and keep firmware updates enabled to stay ahead of potential threats. You've got this! By following these steps, you'll keep your network secure and ready to take on anything. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01096 · 65.3th percentile
Published
2025-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack overflow attack using…
    cvelistv5