CVE-2025-11387: Tenda AC15 fast_setting_pppoe_set stack-based overflow
A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fastsettingpppoeset. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11387?
CVE-2025-11387 is classified as a critical vulnerability due to the potential for remote exploitation leading to a stack-based buffer overflow.
How do I fix CVE-2025-11387?
To mitigate CVE-2025-11387, update the Tenda AC15 firmware to the latest version provided by the manufacturer.
What devices are affected by CVE-2025-11387?
CVE-2025-11387 specifically affects the Tenda AC15 routers running firmware version 15.03.05.18.
Can CVE-2025-11387 be exploited remotely?
Yes, CVE-2025-11387 can be exploited remotely through manipulation of the Password argument in the /goform/fast_setting_pppoe_set function.
What are the potential impacts of CVE-2025-11387?
The exploitation of CVE-2025-11387 could lead to unauthorized access and execution of arbitrary code on the affected device.