CNNVD-202509-4285 Information

CNNVD ID

CNNVD-202509-4285

CVE-2025-11120

  • CNNVD Published: 2025-09-28

Description (Chinese)

Tenda AC8是中国腾达(Tenda)公司的一款无线路由器。 Tenda AC8 16.03.34.06版本存在安全漏洞,该漏洞源于文件/goform/SetServerConfig中的函数formSetServerConfig存在缓冲区溢出,可能导致远程执行任意代码。

Description (English)

Tenda AC8 is a wireless router of Tenda China. 16.03.34.06 version of Tenda AC8 has a security loophole, which stems from the presence of a buffer zone spill in the function Form SetServerConfig in document/goform/SetServerConfig, which may result in the remote implementation of any code.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-09-28

Last Modified

2026-02-24

References

https://vuldb.com/?id.326201 https://vuldb.com/?submit.664065 https://vuldb.com/?ctiid.326201 https://github.com/alc9700jmo/CVE/issues/19 https://www.tenda.com.cn/ https://access.redhat.com/security/cve/cve-2025-11120

Share on: