CVE-2025-11524: Tenda AC7 SetDDNSCfg stack-based overflow
A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11524?
CVE-2025-11524 has a high severity due to its potential to allow remote attackers to exploit a stack-based buffer overflow.
How do I fix CVE-2025-11524?
To fix CVE-2025-11524, update the Tenda AC7 firmware to the latest version provided by the manufacturer.
Who is affected by CVE-2025-11524?
CVE-2025-11524 affects users of the Tenda AC7 router running firmware version 15.03.06.44.
What type of attack is associated with CVE-2025-11524?
CVE-2025-11524 is associated with a remote code execution attack due to stack-based buffer overflow vulnerabilities.
Can CVE-2025-11524 be exploited remotely?
Yes, CVE-2025-11524 can be exploited remotely, making it particularly dangerous if not patched.