CNNVD-202510-1401 Information
Oct 10, 2025
cve
CNNVD ID
CNNVD-202510-1401
Related CVE
- CNNVD Published: 2025-10-10
Description (Chinese)
Tenda AC7是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC7 15.03.06.44版本存在安全漏洞，该漏洞源于文件/goform/setNotUpgrade中参数newVersion存在栈缓冲区溢出，可能导致远程执行任意代码。
Description (English)
Tenda AC7 is a wireless router of Tenda, China. There is a security loophole in version Tenda AC7 15.03.06.44, which stems from the spilling of the neweVersion, the parameter in file/goform/setnotUpgrade, which could lead to the remote implementation of any code.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
腾达
Published
2025-10-10
Last Modified
2026-02-24
References
https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/setNotUpgrade.md https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/setNotUpgrade.md#exploit https://vuldb.com/?ctiid.327908 https://vuldb.com/?id.327908 https://vuldb.com/?submit.671597 https://www.tenda.com.cn/
Share on: