CNNVD-202510-1373 Information
Oct 09, 2025
cve
CNNVD ID
CNNVD-202510-1373
Related CVE
- CNNVD Published: 2025-10-09
Description (Chinese)
Tenda AC7是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC7 15.03.06.44版本存在安全漏洞，该漏洞源于对文件/goform/SetUpnpCfg中参数upnpEn的错误操作，可能导致栈缓冲区溢出。
Description (English)
Tenda AC7 is a wireless router of Tenda, China. There is a security loophole in version Tenda AC7 15.03.06.44, which stems from an error in the operation of the parameter upnpen in document/goform/SetUpnpCfg, which could lead to a spill out of the silo buffer zone.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
腾达
Published
2025-10-09
Last Modified
2026-02-24
References
https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/SetUpnpCfg.md https://vuldb.com/?ctiid.327663 https://vuldb.com/?id.327663 https://vuldb.com/?submit.669853 https://vuldb.com/?submit.669860 https://www.tenda.com.cn/
Share on: