CVE-2025-14993

🗓️ 21 Dec 2025 04:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 23 Views🌐 WEB

Remote exploit of Tenda AC18 via SetDlnaCfg sprintf buffer overflow in web request handler.

Reporter	Title	Published	Views	Family All 10
bdu_fstec	The vulnerability of the sprintf function in Tenda AC18 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure due to incorrect HTTP requests.	26 Dec 202500:00	–	bdu_fstec
circl	CVE-2025-14993	20 Dec 202508:15	–	circl
cnnvd	Tenda AC18 安全漏洞	21 Dec 202500:00	–	cnnvd
cvelist	CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow	21 Dec 202504:32	–	cvelist
euvd	EUVD-2025-204665	21 Dec 202506:31	–	euvd
nvd	CVE-2025-14993	21 Dec 202505:16	–	nvd
osv	CVE-2025-14993	21 Dec 202505:16	–	osv
ptsecurity	PT-2025-52552	18 Dec 202500:00	–	ptsecurity
redhatcve	CVE-2025-14993	22 Dec 202505:35	–	redhatcve
vulnrichment	CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow	21 Dec 202504:32	–	vulnrichment

NVD

Vulners

Node

AND

tenda ac18_firmwareMatch15.03.05.05

tenda ac18Match-

[
  {
    "vendor": "Tenda",
    "product": "AC18",
    "versions": [
      {
        "version": "15.03.05.05",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ac18_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "HTTP Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
github	www.github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md
github	www.github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md

Parameter	Position	Path	Description	CWE
scanList	request body	goform/SetDlnaCfg	Remote stack-based buffer overflow in handling of the scanList argument in SetDlnaCfg via sprintf.	CWE-119, CWE-121

17 Jun 2026 08:36Current

7.2High risk

Vulners AI Score7.2

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00671

SSVC