CVE-2025-4810: Tenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow
A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument reboottime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4810?
CVE-2025-4810 has been declared as critical due to its potential impact on affected systems.
How does CVE-2025-4810 affect Tenda AC7 routers?
CVE-2025-4810 affects the function formSetRebootTimer in Tenda AC7 routers, leading to a stack-based buffer overflow.
How do I fix CVE-2025-4810?
To fix CVE-2025-4810, you should apply the latest firmware update provided by Tenda for affected AC7 routers.
Can CVE-2025-4810 be exploited remotely?
Yes, CVE-2025-4810 can be exploited remotely by manipulating the reboot_time argument.
What are the potential impacts of CVE-2025-4810?
The potential impacts of CVE-2025-4810 include denial of service, unauthorized access, and execution of arbitrary code on the affected router.