CVE-2025-15215: Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15215?
CVE-2025-15215 is classified as a high-severity vulnerability due to its potential for causing buffer overflow.
How do I fix CVE-2025-15215?
To fix CVE-2025-15215, update the Tenda AC10U firmware to the latest version that addresses this vulnerability.
What is the impact of CVE-2025-15215 on my device?
CVE-2025-15215 can potentially allow an attacker to execute arbitrary code on the affected Tenda AC10U device.
Which versions of Tenda AC10U are affected by CVE-2025-15215?
CVE-2025-15215 affects Tenda AC10U versions 15.03.06.48 and 15.03.06.49.
How can I detect if CVE-2025-15215 is exploiting my Tenda AC10U?
You can check your logs for unusual network activity or application behavior related to the formSetPPTPUserList function.