Stack-Based Buffer Overflow in Tenda AC18 Router
CVE-2025-63835
6.5MEDIUM
What is CVE-2025-63835?
A stack-based buffer overflow has been identified in the Tenda AC18 router, specifically within the guestSsid parameter of the /goform/WifiGuestSet interface. This vulnerability allows remote attackers to send oversized input to the guestSsid field. Exploitation of this flaw may result in denial of service, causing the device to crash, or even enable potential remote code execution, thereby compromising the security of the network.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved