CVE-2025-4897: Tenda A15 HTTP POST Request multimodalAdd buffer overflow
Published May 18, 2025
·Updated
A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
4 affected components
Tenda A15>=15.13.07.09<=15.13.07.13
All of the following
Any of the following
Tenda A15 Firmware=15.13.07.09
Tenda A15 Firmware=15.13.07.13
Tenda A15
Event History
May 18, 2025
CVE Published
via MITRE·09:31 PM
Data Sourced
via MITRE·09:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4897?
CVE-2025-4897 has been classified as a critical vulnerability.
2
What component is affected by CVE-2025-4897?
CVE-2025-4897 affects the HTTP POST Request Handler in the Tenda A15.
3
What type of vulnerability is CVE-2025-4897?
CVE-2025-4897 is a buffer overflow vulnerability.
4
How can I fix CVE-2025-4897?
To fix CVE-2025-4897, update your Tenda A15 to the latest firmware version available beyond 15.13.07.13.
5
Which versions of Tenda A15 are affected by CVE-2025-4897?
Tenda A15 versions 15.13.07.09 and 15.13.07.13 are affected by CVE-2025-4897.