CVE-2025-25663

CRITICAL

Tenda AC8V4 V16.03.34.06 - Stack-based Buffer Overflow via WifiExtraSet wpapsk_crypto Argument

Title source: llm
STIX 2.1

Description

A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0051
EPSS Percentile 39.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120 CWE-787
Status published
Products (1)
tenda/ac8_firmware 16.03.34.06
Published Feb 20, 2025
Tracked Since Feb 18, 2026