CVE-2025-11523: Tenda AC7 AdvSetLanip command injection
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11523?
CVE-2025-11523 is categorized as a high severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2025-11523?
To mitigate CVE-2025-11523, update your Tenda AC7 firmware to the latest version provided by the vendor.
What impacts does CVE-2025-11523 have on Tenda AC7 devices?
CVE-2025-11523 can allow an attacker to execute arbitrary commands on affected Tenda AC7 devices via remote exploitation.
Is the exploit for CVE-2025-11523 publicly available?
Yes, the exploit for CVE-2025-11523 has been made public, increasing the urgency for remediation.
What is the affected component in CVE-2025-11523?
CVE-2025-11523 affects the /goform/AdvSetLanip file within the Tenda AC7 router's software.