CVE-2025-29462

9.8 criticalEPSS 0.6%

Critical (9.8) in tenda ac15 firmware. EPSS 0.6% chance of exploitation in the next 30 days.

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:ac15_firmware

References

https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx

Check your stack JSON