Vulnerability Description
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac10U Firmware | 15.03.06.48 |
| Tenda | Ac10U | 1.0 |
Related Weaknesses (CWE)
References
- https://vuldb.com/?ctiid.338600VDB Entry
- https://vuldb.com/?id.338600VDB Entry
- https://vuldb.com/?submit.725365VDB Entry
- https://www.notion.so/Tenda-AC10U-setPptpUserList-2d753a41781f80e8ba6bc37ba61003ExploitThird Party Advisory
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2025-15215?
CVE-2025-15215 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. Thi...
How severe is CVE-2025-15215?
CVE-2025-15215 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-15215?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac10U Firmware, Tenda Ac10U.