CVE-2025-11389: Tenda AC15 saveAutoQos stack-based overflow
A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11389?
CVE-2025-11389 is considered to have a high severity due to its potential for remote exploitation resulting in a stack-based buffer overflow.
How do I fix CVE-2025-11389?
To fix CVE-2025-11389, update your Tenda AC15 firmware to the latest available version that addresses this vulnerability.
What does CVE-2025-11389 affect?
CVE-2025-11389 affects the Tenda AC15 router specifically in the /goform/saveAutoQos function.
Can CVE-2025-11389 be exploited remotely?
Yes, CVE-2025-11389 can potentially be exploited remotely due to its nature as a buffer overflow vulnerability.
What are the potential consequences of CVE-2025-11389 exploitation?
Exploitation of CVE-2025-11389 could allow an attacker to execute arbitrary code on the Tenda AC15 device.