CVE-2025-5794

CVE-2025-5794 affects Tenda AC5 15.03.06.47. The vulnerability is in the function formSetPPTPUserList within /goform/setPptpUserList, where improper validation of the input length in the list parameter leads to a buffer overflow. This can be exploited remotely to execute arbitrary code or cause a...