PT-2026-28700 · Tenda · Tenda Ac15

·

CVE-2026-4975

·

Publicado

2026-03-27

·

Atualizado

2026-03-28

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19
Description A flaw exists in the Tenda AC15 router that allows remote attackers to trigger a stack-based buffer overflow. The issue is located within the POST Request Handler component, specifically in the formSetCfm function of the /goform/setcfm file. Manipulation of the funcpara1 argument leads to the overflow. The exploit has been publicly disclosed.
Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Memory Corruption

Buffer Overflow

Stack Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-4975

Produtos afetados

Tenda Ac15