The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices lies in the fact that the operation exceeds the buffer boundaries in memory when processing the newVersion parameter at the end of the goform/setNotUpgrade process. Exploiting this vulnerability allows...

CVE-2025-11586: Stack-based Buffer Overflow

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-11388: Stack-based Buffer Overflow

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2025-11324

CVE-2025-11324 affects Tenda AC18 (firmware 15.03.05.19(6318)). The vulnerability is a stack-based buffer overflow in an unknown function within /goform/setNotUpgrade caused by improper handling of the newVersion parameter. Exploitation can be performed remotely; a public exploit exists. Affected...

CVE-2025-11324: Stack-based Buffer Overflow

A vulnerability was identified in Tenda AC18 15.03.05.196318. Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is public...