CVE-2025-5608: Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow
A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5608?
CVE-2025-5608 is classified as a critical vulnerability due to its potential for remote exploitation.
How do I fix CVE-2025-5608?
To mitigate CVE-2025-5608, users should update the Tenda AC18 firmware to the latest version provided by the vendor.
What is the impact of exploiting CVE-2025-5608?
Exploiting CVE-2025-5608 can lead to a buffer overflow, allowing attackers to execute arbitrary code on the affected device.
Which software is affected by CVE-2025-5608?
CVE-2025-5608 affects the Tenda AC18 router firmware version 15.03.05.05.
Can CVE-2025-5608 be exploited remotely?
Yes, CVE-2025-5608 can be exploited remotely through the vulnerable function formsetreboottimer.