CVE-2025-14993

🗓️ 21 Dec 2025 04:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 13 Views🌐 WEB

Remote exploit of Tenda AC18 via SetDlnaCfg sprintf buffer overflow in web request handler.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-14993	20 Dec 202508:15	–	circl
CNNVD	Tenda AC18 安全漏洞	21 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow	21 Dec 202504:32	–	cvelist
EUVD	EUVD-2025-204665	21 Dec 202506:31	–	euvd
NVD	CVE-2025-14993	21 Dec 202505:16	–	nvd
Positive Technologies	PT-2025-52552	18 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-14993	22 Dec 202505:35	–	redhatcve
Vulnrichment	CVE-2025-14993 Tenda AC18 HTTP Request SetDlnaCfg sprintf stack-based overflow	21 Dec 202504:32	–	vulnrichment

NVD

Vulners

Node

tenda ac18_firmwareMatch15.03.05.05

AND

tenda ac18Match-

[
  {
    "vendor": "Tenda",
    "product": "AC18",
    "versions": [
      {
        "version": "15.03.05.05",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ac18_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "HTTP Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
github	www.github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md
github	www.github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md

Parameter	Position	Path	Description	CWE
scanList	request body	goform/SetDlnaCfg	Stack-based buffer overflow via manipulated scanList parameter in SetDlnaCfg enables remote code execution.	CWE-119, CWE-121

24 Feb 2026 06:00Current

7.2High risk

Vulners AI Score7.2

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00252

SSVC