CVE-2025-11123: Tenda AC18 saveAutoQos stack-based overflow
A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11123?
CVE-2025-11123 is classified as a high-severity vulnerability due to its potential for remote exploitation and impact on device stability.
How do I fix CVE-2025-11123?
To fix CVE-2025-11123, update the firmware of the Tenda AC18 router to the latest version that addresses this vulnerability.
What is the impact of CVE-2025-11123?
The impact of CVE-2025-11123 includes a stack-based buffer overflow that may allow an attacker to take control of the device remotely.
Who is affected by CVE-2025-11123?
CVE-2025-11123 affects users of the Tenda AC18 router running the specified firmware version 15.03.05.19.
Can CVE-2025-11123 be exploited remotely?
Yes, CVE-2025-11123 can be exploited remotely, allowing unauthorized users to manipulate certain functions on the device.