Buffer Overflow Vulnerability in Tenda AC10 Router
CVE-2025-45779

9.8CRITICAL

Key Information:

Vendor

Tenda
Status
AC10
Vendor
CVE Published:
12 May 2025

What is CVE-2025-45779?

The Tenda AC10 router's firmware version V1.0re_V15.03.06.46 is susceptible to a buffer overflow vulnerability in the formSetPPTPUserList handler. This vulnerability arises from improper handling of the list POST parameter, potentially allowing an attacker to execute arbitrary code or crash the device. Users of the affected version should consider applying necessary updates or implementing mitigating measures to safeguard their network.

References

https://www.tendacn.com/us/download/detail-3782.html
https://github.com/sunyou-iot/iot-vul/blob/main/TendaAC10...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-45779 : Buffer Overflow Vulnerability in Tenda AC10 Router