CVE-2025-5861

KRITISCH 9.8CVE-2025-5861 · Published 09/06/2025 · updated 17/06/2026

Kurz gesagt

CVE-2025-5861 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.9%, höher als bei 94.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

lavender-bicycle-a5a.notion.site/Tenda-AC7-fromadvsetlanip-20a53a41781f80038f4fc4b9d927eb9a · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
tenda.com.cn · Product
lavender-bicycle-a5a.notion.site/Tenda-AC7-fromadvsetlanip-20a53a41781f80038f4fc4b9d927eb9a · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free