CVE-2025-63835

HIGH

Tenda AC18 v15.03.05.05_multi - Buffer Overflow

Title source: llm
STIX 2.1

Description

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to denial of service (device crash) or potential remote code execution.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0032
EPSS Percentile 55.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
tenda/ac18_firmware 15.03.05.05
Published Nov 10, 2025
Tracked Since Feb 18, 2026