CVE-2025-9523: Tenda AC1206 GetParentControlInfo stack-based overflow
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9523?
CVE-2025-9523 has a high severity due to its potential for remote exploitation leading to a stack-based buffer overflow.
How do I fix CVE-2025-9523?
To fix CVE-2025-9523, update the Tenda AC1206 firmware to the latest version provided by the manufacturer.
What are the impacts of CVE-2025-9523?
The impacts of CVE-2025-9523 include possible unauthorized remote access and execution of arbitrary code due to stack-based buffer overflow.
Which devices are affected by CVE-2025-9523?
CVE-2025-9523 affects the Tenda AC1206 router specifically running firmware version 15.03.06.23.
Is CVE-2025-9523 exploitability remote or local?
CVE-2025-9523 is exploitable remotely, allowing attackers to manipulate vulnerable arguments from a distance.