Medium severity5.3NVD Advisory· Published Aug 28, 2025· Updated Jun 17, 2026

CVE-2025-57217

Description

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler.

Affected products

Tenda/Ac10llm-fuzzy
Range: v4.0 firmware v16.03.10.09_multi_TDE01
Tenda/Ac10 Firmwarecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- cpe:2.3:o:tenda:ac10_firmware:16.03.10.09_multi_tde01:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

plaid-knot-11b.notion.site/Stack-Buffer-Overflow-in-login-Auth-via-Password-parameter-Remote-attacker-can-execute-arbitrary-c-23fb3e9cce32800ba969f8b3a9f80bdanvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000