CVE-2025-11386: Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11386?
CVE-2025-11386 has a high severity rating due to the potential for remote stack-based buffer overflow attacks.
How do I fix CVE-2025-11386?
To fix CVE-2025-11386, update the Tenda AC15 firmware to the latest version provided by the vendor.
What does CVE-2025-11386 affect?
CVE-2025-11386 affects the Tenda AC15 router, specifically the /goform/SetDDNSCfg file's POST parameter handler.
Can CVE-2025-11386 be exploited remotely?
Yes, CVE-2025-11386 can be exploited remotely, making it particularly concerning for network security.
What are the potential consequences of CVE-2025-11386?
Exploitation of CVE-2025-11386 could lead to system crashes or unauthorized access to the router's functions.