CVE-2025-5861: Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow
A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5861?
CVE-2025-5861 is classified as a critical vulnerability.
What vulnerable software is affected by CVE-2025-5861?
CVE-2025-5861 affects the Tenda AC7 firmware version 15.03.06.44.
How do I fix CVE-2025-5861?
To remediate CVE-2025-5861, update the Tenda AC7 firmware to the latest version that addresses the vulnerability.
What is the impact of CVE-2025-5861?
CVE-2025-5861 can lead to a buffer overflow due to improper handling of the lanMask parameter.
Can CVE-2025-5861 be exploited remotely?
Yes, CVE-2025-5861 can be exploited remotely by manipulating the affected arguments.