CVE-2025-61498

A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet

High · published October 30, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

⚡ A crafty packet is all it takes to bring down your Tenda AC8 router! This buffer overflow vulnerability could lead to a denial of service, making your internet go poof! 💨 Think of it like a restaurant that gets too many orders at once without checking their kitchen's capacity. If they can't handle the volume, the whole place might shut down, leaving everyone hungry and frustrated! An attacker can exploit this flaw to flood the UPnP service with malicious packets, effectively jamming your device and making it unusable. This could leave you without internet access, causing absolute chaos for your daily online activities.

Put simply

Think of it like a restaurant that gets too many orders at once without checking their kitchen's capacity. If they can't handle the volume, the whole place might shut down, leaving everyone hungry and frustrated! This buffer overflow vulnerability in the UPnP service of Tenda AC8 Hardware v03.03.10.01 can be triggered by sending specially crafted packets, leading to a Denial of Service (DoS) condition as the service crashes under the strain.

What to do

An attacker can exploit this flaw to flood the UPnP service with malicious packets, effectively jamming your device and making it unusable. This could leave you without internet access, causing absolute chaos for your daily online activities. To protect your network, patch your Tenda AC8 router to version 03.03.10.02 or higher as soon as it becomes available. Additionally, consider disabling UPnP if not needed, to minimize exposure to this type of attack. You've got this! Follow these steps and you'll be back to a secure internet experience in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.2th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet
    cvelistv5