CVE-2025-11525: Tenda AC7 SetUpnpCfg stack-based overflow
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11525?
CVE-2025-11525 has a high severity rating due to its potential for remote exploitation leading to a stack-based buffer overflow.
How do I fix CVE-2025-11525?
To mitigate CVE-2025-11525, update the Tenda AC7 firmware to the latest version provided by the manufacturer.
Who is affected by CVE-2025-11525?
Users of the Tenda AC7 with firmware version 15.03.06.44 are affected by CVE-2025-11525.
Can CVE-2025-11525 be exploited remotely?
Yes, CVE-2025-11525 can be exploited remotely through manipulation of the upnpEn argument.
What type of vulnerability is CVE-2025-11525?
CVE-2025-11525 is categorized as a stack-based buffer overflow vulnerability.