CVE-2025-5849: Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
A vulnerability was found in Tenda AC15 15.03.05.19multi. It has been classified as critical. This affects the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5849?
CVE-2025-5849 has been classified as critical.
What software versions are affected by CVE-2025-5849?
CVE-2025-5849 affects Tenda AC15 firmware version 15.03.05.19_multi.
How do I fix CVE-2025-5849?
To resolve CVE-2025-5849, users should upgrade the affected Tenda AC15 firmware to the latest available version.
What type of vulnerability is CVE-2025-5849?
CVE-2025-5849 is categorized as a stack-based buffer overflow vulnerability.
What is the impact of CVE-2025-5849?
The manipulation of the argument remoteIp in CVE-2025-5849 can lead to unauthorized remote access and control of the affected device.