CNNVD-202509-4282 Information

Sep 28, 2025 cve

CNNVD ID

CNNVD-202509-4282

CVE-2025-11123

CNNVD Published: 2025-09-28

Description (Chinese)

Tenda AC18是中国腾达（Tenda）公司的一款路由器。 Tenda AC18 15.03.05.19版本存在安全漏洞，该漏洞源于文件/goform/saveAutoQos中对参数enable的错误操作导致栈缓冲区溢出，可能被远程利用。

Description (English)

Tenda AC18 is a router for Tenda China. There is a security loophole in version Tenda AC18 15.03.05.19, which stems from the error in the use of the parameterenable in the document/goform/saveAutoQos, resulting in the spilling out of the silo buffer zone, which could be used remotely.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-09-28

Last Modified

2026-02-24

References

https://vuldb.com/?submit.664197 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/saveAutoQos.md https://www.tenda.com.cn/ https://vuldb.com/?ctiid.326204 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/saveAutoQos.md#poc https://vuldb.com/?id.326204 https://access.redhat.com/security/cve/cve-2025-11123

Share on: