CVE-2025-4809

CVE-2025-4809 affects Tenda AC7 (version 15.03.06.44). The vulnerability is in the fromSafeSetMacFilter function of /goform/setMacFilterCfg; manipulating the deviceList argument causes a stack-based buffer overflow. Remote access is possible, and the exploit has been disclosed publicly. Multiple ...