CVE-2025-5607: Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow
A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5607?
CVE-2025-5607 has been rated as critical due to its potential for remote exploitation and resulting buffer overflow.
How do I fix CVE-2025-5607?
To fix CVE-2025-5607, ensure that your Tenda AC18 firmware is updated to the latest version released by the vendor.
What are the potential impacts of exploiting CVE-2025-5607?
Exploiting CVE-2025-5607 may lead to arbitrary code execution or system instability due to the buffer overflow vulnerability.
Who is affected by CVE-2025-5607?
CVE-2025-5607 affects users of the Tenda AC18 router running the firmware version 15.03.05.05.
Can CVE-2025-5607 be exploited remotely?
Yes, CVE-2025-5607 can be exploited remotely, making it a significant security risk for affected devices.