CVE-2025-14992: Tenda AC18 HTTP Request GetParentControlInfo strcpy stack-based overflow
A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14992?
CVE-2025-14992 is considered a critical vulnerability due to its potential for remote code execution through stack-based buffer overflow.
How do I fix CVE-2025-14992?
To fix CVE-2025-14992, update the Tenda AC18 firmware to the latest version provided by Tenda.
What component is affected in CVE-2025-14992?
CVE-2025-14992 affects the HTTP Request Handler component, specifically the strcpy function in the /goform/GetParentControlInfo file.
Can CVE-2025-14992 be exploited remotely?
Yes, CVE-2025-14992 can be exploited remotely due to its stack-based buffer overflow vulnerability.
What devices are impacted by CVE-2025-14992?
The Tenda AC18 is the primary device impacted by CVE-2025-14992.