High severity8.8NVD Advisory· Published Jun 5, 2025· Updated Jun 17, 2026
CVE-2025-5629
CVE-2025-5629
Description
A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
5- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/pfwqdxwdd/cve/blob/main/4.mdnvdBroken Link
- vuldb.comnvdPermissions Required
- www.tenda.com.cnnvdProduct
News mentions
0No linked articles in our index yet.