CVE-2025-29387 - CERT CVE

  1. CVE-2025-29387

ID CVE-2025-29387
Sažetak In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
Reference
CVSS
Base: 7.1
Impact: 5.9
Exploitability:1.2
Pristup
VektorSloženostAutentikacija
NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Zadnje važnije ažuriranje 17-03-2025 - 19:51
Objavljeno 14-03-2025 - 17:15