VYPR
High severity8.8NVD Advisory· Published Jan 19, 2025· Updated Jun 17, 2026

CVE-2025-0566

CVE-2025-0566

Description

A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

3
  • cpe:2.3:o:tenda:ac15_firmware:15.13.07.13:*:*:*:*:*:*:*
  • Tenda/AC15llm-fuzzy2 versions
    15.13.07.13+ 1 more
    • (no CPE)range: 15.13.07.13
    • (no CPE)range: 15.13.07.13

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.