Vulnerability Details CVE-2025-15217
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing manipulation of the argument list results in buffer overflow. The attack can be initiated remotely.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- https://lavender-bicycle-a5a.notion.site/Tenda-AC23-formSetPPTPUserList-2d753a41781f8091b772cf9e66a687f1?source=copy_link
- https://vuldb.com/?ctiid.338602
- https://vuldb.com/?id.338602
- https://vuldb.com/?submit.725448
- https://www.tenda.com.cn/
- https://lavender-bicycle-a5a.notion.site/Tenda-AC23-formSetPPTPUserList-2d753a41781f8091b772cf9e66a687f1
Products affected by CVE-2025-15217
-
cpe:2.3:h:tenda:ac23:-
-
cpe:2.3:o:tenda:ac23_firmware:16.03.07.52