VYPR
Unrated severityNVD Advisory· Published Jan 19, 2025· Updated Jan 21, 2025

Tenda AC15 SetDevNetName formSetDevNetName stack-based overflow

CVE-2025-0566

Description

A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Tenda/AC15llm-fuzzy2 versions
    = 15.13.07.13+ 1 more
    • (no CPE)range: = 15.13.07.13
    • (no CPE)range: 15.13.07.13

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.