The vulnerability lies in the /goform/multimodalAdd component of the HTTP POST Request Handler in the microprogramming software for Tenda A15 routers. This allows a hacker to execute any arbitrary code.

The vulnerability in the /goform/multimodalAdd component of the HTTP POST Request Handler of the microprogramming-based router software Tenda A15 involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker operating remotely to execu...

CVE-2025-4897: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...