CVE-2022-25431

9.8 criticalEPSS 1.7%

Critical (9.8) in tenda ac9 firmware. EPSS 1.7% chance of exploitation in the next 30 days.

Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-11-01)
CWE: CWE-787
Published: 2022-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19