CVE-2025-29462

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack.
CVSS

No CVSS.

References
Link Resource
https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ac15_firmware:15.13.07.13:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*

History

22 Apr 2025, 16:33

Type Values Removed Values Added
References () https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx - () https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx - Exploit, Third Party Advisory
First Time Tenda ac15 Firmware
Tenda
Tenda ac15
CPE cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*
cpe:2.3:o:tenda:ac15_firmware:15.13.07.13:*:*:*:*:*:*:*

03 Apr 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-03 20:15

Updated : 2025-04-22 16:33


NVD link : CVE-2025-29462

Mitre link : CVE-2025-29462


JSON object : View

Products Affected

tenda

  • ac15
  • ac15_firmware
CWE

No CWE.