CVE-2025-8178: Tenda AC10 RequestsProcessLaid heap-based overflow
A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8178?
CVE-2025-8178 is classified as a critical vulnerability.
How does CVE-2025-8178 affect Tenda AC10?
CVE-2025-8178 affects Tenda AC10 by allowing heap-based buffer overflow through manipulation of the device1D argument.
Can CVE-2025-8178 be exploited remotely?
Yes, CVE-2025-8178 can be exploited remotely.
What should I do to remediate CVE-2025-8178?
To remediate CVE-2025-8178, update the Tenda AC10 to the latest firmware version provided by the manufacturer.
What are the potential impacts of CVE-2025-8178?
The potential impacts of CVE-2025-8178 include unauthorized access and execution of arbitrary code on the affected device.