CVE-2025-0566

Katalog CVE

CVSS 8.8 · High EPSS 8,7%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada tenda ac15 firmware. Skor CVSS 3.1 8.8 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

19 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

8,7% peluang dieksploitasi; lebih tinggi dari 95,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pan.baidu.com/s/1DBDf27oCTIMkW-PSZwg02Q?pwd=tara exploit · advisory pihak ketiga
• https://vuldb.com/?id.292527 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.484418 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.292527 permissions required · vdb entry
• https://www.tenda.com.cn/ product