CNNVD-202510-1372 Information

CNNVD ID

CNNVD-202510-1372

CVE-2025-11526

  • CNNVD Published: 2025-10-09

Description (Chinese)

Tenda AC7是中国腾达(Tenda)公司的一款无线路由器。 Tenda AC7 15.03.06.44版本存在安全漏洞,该漏洞源于文件/goform/WifiMacFilterSet中参数wifi_chkHz的操作导致栈缓冲区溢出,可能导致远程攻击。

Description (English)

Tenda AC7 is a wireless router of Tenda, China. There is a security loophole in version Tenda AC7 15.03.06.44, which stems from the operation of the parameter wifi chkHz in document/goform/WifiMacFilterSet, resulting in the spilling of the silo buffer zone, which could lead to a long-range attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-10-09

Last Modified

2026-02-24

References

https://vuldb.com/?submit.669854 https://vuldb.com/?id.327664 https://vuldb.com/?submit.669861 https://vuldb.com/?ctiid.327664 https://www.tenda.com.cn/ https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/WifiMacFilterSet.md

Share on: