CVE-2025-57085

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function

Critical · published September 9, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

🚨 A single crafted request is all it takes to trigger a stack overflow in Tenda W30E, potentially bringing your network to its knees! 🔥 Think of it like an overloaded circuit: if you plug in too many devices at once, everything shuts down. Similarly, this vulnerability floods the system, causing a Denial of Service that makes your router unresponsive. An attacker could exploit this vulnerability to crash your Tenda W30E, leaving your network down and users unable to connect. This means no internet access, disrupted services, and a real headache for anyone relying on that connection. It's a critical hit to your digital infrastructure!

Put simply

Think of it like an overloaded circuit: if you plug in too many devices at once, everything shuts down. Similarly, this vulnerability floods the system, causing a Denial of Service that makes your router unresponsive. This stack overflow occurs in the 'v17' parameter of the UploadCfg function, enabling attackers to craft requests that overflow the stack and trigger a Denial of Service condition.

What to do

An attacker could exploit this vulnerability to crash your Tenda W30E, leaving your network down and users unable to connect. This means no internet access, disrupted services, and a real headache for anyone relying on that connection. It's a critical hit to your digital infrastructure! Immediate action is crucial! Update your Tenda W30E to version V16.01.0.20 or later to patch this vulnerability. If you can't update right away, consider implementing firewall rules to block suspicious requests temporarily. You've got this! With a quick patch and some network vigilance, you can keep your systems safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.6th percentile
Published
2025-09-09T00:00Z
EPSS history
Timeline
  • 09 SEP 00:00Z
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function
    cvelistv5