CVE-2025-14992
A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the
A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow.
Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
HIGH · CVSS 8.8
EPSS 0.00228
Act now
- Public exploit or PoC is available
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0