CVE-2025-9089: Tenda AC20 SetIpMacBind sub_48E628 stack-based overflow
A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9089?
CVE-2025-9089 is considered to have a high severity due to its potential for remote exploitation via a stack-based buffer overflow.
How do I fix CVE-2025-9089?
To mitigate CVE-2025-9089, update the Tenda AC20 firmware to the latest version provided by the vendor.
What are the potential impacts of CVE-2025-9089?
CVE-2025-9089 may allow attackers to execute arbitrary code or cause a denial of service through remote exploitation.
Who is affected by CVE-2025-9089?
CVE-2025-9089 specifically affects users of the Tenda AC20 router running firmware version 16.03.08.12.
What are the indicators of exploitation for CVE-2025-9089?
Indicators of exploitation for CVE-2025-9089 may include unusual network traffic patterns targeting the /goform/SetIpMacBind endpoint.