Tenda AC7 /goform/fast_setting_pppoe_set file buffer overflow vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the parameter Password in the file /goform/fastsettingpppoeset that fails to correctly validate the length and size of the input data, and c...

CVE-2025-11527

CVE-2025-11527 concerns the Tenda AC7 router (version 15.03.06.44). A vulnerability in the file /goform/fast_setting_pppoe_set allows manipulation of the Password parameter to trigger a stack-based overflow in a function whose exact name is not disclosed in the documents. The issue is exploitable...