Buffer Overflow Vulnerability in Tenda A15 Router

CVE-2025-4897

What is CVE-2025-4897?

A vulnerability has been identified in the Tenda A15 router, specifically within the HTTP POST request handler at the /goform/multimodalAdd endpoint. This vulnerability can be exploited remotely, allowing an attacker to manipulate memory through a buffer overflow. As a result, unauthorized access and control over the router may be achieved. The potential for exploitation has been made public, emphasizing the importance for users to take action and secure their devices to mitigate risks.

References