In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiBasicSet-security.md | Exploit Third Party Advisory |
| https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiBasicSet-security.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Apr 2025, 13:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:tenda:ac9:1.0:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac9_firmware:15.03.05.14_multi:*:*:*:*:*:*:* |
|
| First Time |
Tenda ac9 Firmware
Tenda ac9 Tenda |
|
| References | () https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiBasicSet-security.md - Exploit, Third Party Advisory |
29 Apr 2025, 13:52
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
23 Apr 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-121 | |
| References | () https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiBasicSet-security.md - | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
23 Apr 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-23 15:16
Updated : 2025-04-30 13:51
NVD link : CVE-2025-45427
Mitre link : CVE-2025-45427
CVE.ORG link : CVE-2025-45427
JSON object : View
Products Affected
tenda
- ac9_firmware
- ac9
CWE
CWE-121
Stack-based Buffer Overflow