Unrated severityNVD Advisory· Published Aug 15, 2025· Updated Aug 15, 2025

Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow

CVE-2025-9023

Description

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Tenda/AC7llm-fuzzy
Range: =15.03.05.19 or =15.03.06.44
Tenda/AC18llm-fuzzy
Range: =15.03.05.19 or =15.03.06.44
Tenda/AC18v5
Range: 15.03.05.19
Tenda/AC7v5
Range: 15.03.05.19

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/zezhifu1/cve_report/blob/main/AC18/formsetschedled.mdmitreexploit
vuldb.commitrethird-party-advisory
vuldb.commitrethird-party-advisory
github.com/zezhifu1/cve_report/blob/main/AC7/formsetschedled.mdmitrerelated
vuldb.commitresignaturepermissions-required
vuldb.commitrevdb-entrytechnical-description
www.tenda.com.cnmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000