CVE-2025-45427

In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote…

Critical · published April 23, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in Tenda AC9's firmware could let attackers execute arbitrary code remotely — it's like leaving your front door wide open after a housewarming party! 🔥 Think of it as a chef overloading their cooking station with too many ingredients, causing everything to overflow and making a big mess. The attacker can take control of the entire network, just like a rogue chef can ruin a whole kitchen! An attacker could exploit this vulnerability to execute any code they desire on your router, potentially leading to a complete takeover of your network. This means they could snoop on your data, redirect your traffic, or even launch attacks against other devices. The consequences could be absolutely devastating!

Put simply

Think of it as a chef overloading their cooking station with too many ingredients, causing everything to overflow and making a big mess. The attacker can take control of the entire network, just like a rogue chef can ruin a whole kitchen! This stack overflow vulnerability occurs in the security parameter of the /goform/WifiBasicSet function, allowing an attacker to send specially crafted requests to execute arbitrary commands on the device without authentication.

What to do

An attacker could exploit this vulnerability to execute any code they desire on your router, potentially leading to a complete takeover of your network. This means they could snoop on your data, redirect your traffic, or even launch attacks against other devices. The consequences could be absolutely devastating! Update your Tenda AC9 firmware to the latest version immediately to patch this vulnerability. Regularly check for firmware updates and ensure all security parameters are configured properly to safeguard against such exploits. 🛡️ You’ve got this! Stay vigilant, keep your devices updated, and you’ll keep your network safe! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00918 · 59.9th percentile
Published
2025-04-23T00:00Z
EPSS history
Timeline
  • 23 APR 00:00Z
    In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote…
    cvelistv5