Stack Overflow Vulnerability in Tenda AC9 Firmware
CVE-2025-22946

Currently unrated

Key Information:

Vendor

Tenda
Status
Ac9 Firmware
Vendor
CVE Published:
10 January 2025

What is CVE-2025-22946?

The Tenda AC9 v1.0 firmware version 15.03.05.19 is subject to a stack overflow vulnerability located in the /goform/SetOnlineDevName endpoint. This flaw can be exploited remotely, potentially allowing attackers to execute arbitrary code on the affected device. Proper mitigations should be put in place to prevent exploitation and protect sensitive data.

References

https://noisy-caravel-a9a.notion.site/Tenda_AC9V1-0_V15-0...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.