CVE-2025-3167CWE-404

Tenda AC23 API Interface VerAPIMant denial of service

High · published April 3, 2025

CVSS v4.0
7.1
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00893 · 59.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2025-04-03T16:31Z
EPSS history
Timeline
  • 03 APR 16:31Z
    Tenda AC23 API Interface VerAPIMant denial of service
    cvelistv5