The vulnerability of the formSetSchedLed function in the /goform/SetLEDCfg file of the Tenda AC router’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the formSetSchedLed function in the /goform/SetLEDCfg file of the Tenda AC router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2025-9023

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-9023

CVE-2025-9023 affects Tenda AC7 and AC18 devices (versions 15.03.05.19 and 15.03.06.44). The vulnerability is in the formSetSchedLed function in /goform/SetLEDCfg where manipulating the Time parameter triggers a buffer overflow. Remote exploitation is possible, and publicly disclosed exploits exi...

CVE-2025-9023: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-5850: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda AC15 15.03.05.19multi. It has been declared as critical. This vulnerability affects the function formsetschedled of the file /goform/SetLEDCf of the component HTTP POST Request Handler. The manipulation of the argument Time leads to buffer overflow. The attack c...