CNNVD-202510-1371 Information

CNNVD ID

CNNVD-202510-1371

CVE-2025-11527

  • CNNVD Published: 2025-10-09

Description (Chinese)

Tenda AC7是中国腾达(Tenda)公司的一款无线路由器。 Tenda AC7 15.03.06.44版本存在安全漏洞,该漏洞源于文件/goform/fast_setting_pppoe_set中对参数Password的错误操作,可能导致基于栈的缓冲区溢出。

Description (English)

Tenda AC7 is a wireless router of Tenda, China. There is a security loophole in the version of Tenda AC7 15.03.06.44, which stems from the error in the document/goform/fast setting pppoe set of the parameter Password, which could lead to the spilling out of the cage-based buffer zone.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-10-09

Last Modified

2026-02-24

References

https://vuldb.com/?submit.669856 https://www.tenda.com.cn/ https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/fast_setting_pppoe_set.md https://vuldb.com/?ctiid.327665 https://vuldb.com/?id.327665

Share on: