A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.338600 | VDB Entry |
| https://vuldb.com/?id.338600 | VDB Entry |
| https://vuldb.com/?submit.725365 | VDB Entry |
| https://www.notion.so/Tenda-AC10U-setPptpUserList-2d753a41781f80e8ba6bc37ba6100343?pvs=73 | Exploit Third Party Advisory |
| https://www.tenda.com.cn/ | Product |
Configurations
History
02 Jan 2026, 21:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:tenda:ac10u_firmware:15.03.06.48:*:*:*:*:*:*:* cpe:2.3:h:tenda:ac10u:1.0:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac10u_firmware:15.03.06.49:*:*:*:*:*:*:* |
|
| First Time |
Tenda
Tenda ac10u Firmware Tenda ac10u |
|
| References | () https://vuldb.com/?ctiid.338600 - VDB Entry | |
| References | () https://vuldb.com/?id.338600 - VDB Entry | |
| References | () https://vuldb.com/?submit.725365 - VDB Entry | |
| References | () https://www.notion.so/Tenda-AC10U-setPptpUserList-2d753a41781f80e8ba6bc37ba6100343?pvs=73 - Exploit, Third Party Advisory | |
| References | () https://www.tenda.com.cn/ - Product |
30 Dec 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-30 03:15
Updated : 2026-01-02 21:28
NVD link : CVE-2025-15215
Mitre link : CVE-2025-15215
CVE.ORG link : CVE-2025-15215
JSON object : View
Products Affected
tenda
- ac10u_firmware
- ac10u