CVE-2025-9605

🗓️ 29 Aug 2025 02:02:08Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 13 Views🌐 WEB

CVE-2025-9605 in Tenda AC21/AC23 enables remote stack overflow via GetParentControlInfo.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-9605	29 Aug 202506:48	–	circl
CNNVD	Tenda AC23和Tenda AC21 安全漏洞	29 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow	29 Aug 202502:02	–	cvelist
EUVD	EUVD-2025-26203	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9605	29 Aug 202503:15	–	nvd
Positive Technologies	PT-2025-35174	17 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9605	31 Aug 202502:20	–	redhatcve
Vulnrichment	CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow	29 Aug 202502:02	–	vulnrichment

NVD

Vulners

Node

tenda ac21_firmwareMatch16.03.08.16

AND

tenda ac21Match-

Node

tenda ac23_firmwareMatch16.03.08.16

AND

tenda ac23Match-

[
  {
    "vendor": "Tenda",
    "product": "AC21",
    "versions": [
      {
        "version": "16.03.08.16",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Tenda",
    "product": "AC23",
    "versions": [
      {
        "version": "16.03.08.16",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
github	www.github.com/XXRicardo/iot-cve/blob/main/Tenda/AC21/AC21V1.0re_V16.03.08.16.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/XXRicardo/iot-cve/blob/main/Tenda/AC23/Stack-Based%20Buffer%20Overflow%20in%20Tenda%20Wi-Fi%205%20Router%20AC23%EF%BC%88AC23V1.0re_V16.03.07.52%EF%BC%89.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
mac	nested	/goform/GetParentControlInfo	Stack-based buffer overflow via manipulation of mac argument in GetParentControlInfo (remote exploit).	CWE-119, CWE-121

03 Sep 2025 16:10Current

9.6High risk

Vulners AI Score9.6

CVSS 49.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.00665

SSVC