CVE-2025-5848: Tenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
A vulnerability was found in Tenda AC15 15.03.05.19multi and classified as critical. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5848?
CVE-2025-5848 is classified as a critical vulnerability.
How do I fix CVE-2025-5848?
To fix CVE-2025-5848, it's recommended to update the Tenda AC15 firmware to the latest version.
What component is affected by CVE-2025-5848?
CVE-2025-5848 affects the HTTP POST Request Handler within the function formSetPPTPUserList.
What type of vulnerability is CVE-2025-5848?
CVE-2025-5848 is a buffer overflow vulnerability caused by improper handling of argument lists.
Which devices are impacted by CVE-2025-5848?
CVE-2025-5848 impacts the Tenda AC15 device running firmware version 15.03.05.19_multi.