CVE-2025-9023

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-9023

CVE-2025-9023 affects Tenda AC7 and AC18 devices (versions 15.03.05.19 and 15.03.06.44). The vulnerability is in the formSetSchedLed function in /goform/SetLEDCfg where manipulating the Time parameter triggers a buffer overflow. Remote exploitation is possible, and publicly disclosed exploits exi...