CVE-2025-25663

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version V16.03.34.06

Description A vulnerability was found in the function SUB 0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk crypto leads to a stack-based buffer overflow.

Recommendations For Tenda AC8V4 version V16.03.34.06, consider disabling the SUB 0046AC38 function as a temporary workaround until a patch is available. Restrict access to the /goform/WifiExtraSet file to minimize the risk of exploitation. Avoid using the wpapsk crypto argument in the affected API endpoint until the issue is resolved.