CVE-2025-8060

🗓️ 23 Jul 2025 01:32:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views🌐 WEB

Critical vulnerability in Tenda AC23 httpd allows remote stack-based buffer overflow attack.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Tenda AC23 Sub 46C940 Code Execution	25 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-8060	23 Jul 202502:19	–	circl
CNNVD	Tenda AC23 security vulnerabilities	23 Jul 202500:00	–	cnnvd
CNVD	Tenda AC23 Buffer Overflow Vulnerability	24 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-8060 Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow	23 Jul 202501:32	–	cvelist
EUVD	EUVD-2025-22406	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8060	23 Jul 202502:15	–	nvd
osv_cve	CVE-2025-8060	23 Jul 202502:15	–	osv_cve
Positive Technologies	PT-2025-30509 · Tenda · Tenda Ac23	22 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-8060: Stack-based Buffer Overflow	23 Jul 202500:00	–	rapid7

NVD

Vulners

Node

AND

tenda ac23_firmwareMatch16.03.07.52

tenda ac23Match-

[
  {
    "vendor": "Tenda",
    "product": "AC23",
    "versions": [
      {
        "version": "16.03.07.52",
        "status": "affected"
      }
    ],
    "modules": [
      "httpd"
    ]
  }
]

Source	Link
github	www.github.com/Thir0th/Thir0th-CVE/blob/main/Tenda%20AC23_V16.03.07.52_has_a_stack_overflow.md
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
deviceList	request body	/goform/setMacFilterCfg	A stack-based buffer overflow exists in the sub_46C940 function of the httpd component when processing the deviceList argument in the /goform/setMacFilterCfg endpoint.	CWE-119, CWE-121

17 Jun 2026 10:06Current

8.6High risk

Vulners AI Score8.6

CVSS 48.7

CVSS 3.18.8

CVSS 38.8

CVSS 29

EPSS0.00956

SSVC