Vulnerability Description
A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac15 Firmware | 15.03.05.19_multi |
| Tenda | Ac15 | 1.0 |
Related Weaknesses (CWE)
References
- https://candle-throne-f75.notion.site/Tenda-AC15-formSetPPTPUserList-20adf0aa118ExploitThird Party Advisory
- https://vuldb.com/?ctiid.311594Permissions Required
- https://vuldb.com/?id.311594Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.591372Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2025-5848?
CVE-2025-5848 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability was found in Tenda AC15 15.03.05.19_multi and classified as critical. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HT...
How severe is CVE-2025-5848?
CVE-2025-5848 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-5848?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac15 Firmware, Tenda Ac15.