CVE-2025-11324: Tenda AC18 setNotUpgrade stack-based overflow
A vulnerability was identified in Tenda AC18 15.03.05.19(6318). Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11324?
CVE-2025-11324 has been evaluated to have high severity due to its ability to cause stack-based buffer overflow that can be exploited remotely.
How do I fix CVE-2025-11324?
To fix CVE-2025-11324, update your Tenda AC18 router firmware to the latest version provided by Tenda.
What is the impact of CVE-2025-11324?
The impact of CVE-2025-11324 includes potential remote code execution and unauthorized access to the affected Tenda AC18 device.
Who is affected by CVE-2025-11324?
CVE-2025-11324 affects users of the Tenda AC18 router running firmware version 15.03.05.19(6318).
Can CVE-2025-11324 be exploited remotely?
Yes, CVE-2025-11324 can be exploited remotely, allowing attackers to manipulate the vulnerable parameter to achieve a buffer overflow.