CVE-2025-0566 – Tenda AC15 SetDevNetName formSetDevNetName stack-based overflow

https://notcve.org/view.php?id=CVE-2025-0566

19 Jan 2025 — A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://pan.baidu.com/s/1DBDf27oCTIMkW-PSZwg02Q?pwd=tara • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-121: Stack-based Buffer Overflow •