Vulnerability Details CVE-2025-29387
In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.8%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2025-29387
-
cpe:2.3:h:tenda:ac9:1.0
-
cpe:2.3:o:tenda:ac9_firmware:15.03.05.14