CVE-2025-3786

8.7 highEPSS 1.1%

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWEs: CWE-120, CWE-119
Published: 2025-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:ac15_firmware

References

https://github.com/CH13hh/cve/tree/AC15WifiExtraSet
https://vuldb.com/?ctiid.305609
https://vuldb.com/?id.305609
https://vuldb.com/?submit.553703
https://www.tenda.com.cn/

Check your stack JSON