CVE-2025-5851
BaseFortify
Publication date: 2025-06-09
Last updated on: 2025-06-09
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac15_firmware | 15.03.05.19_multi |
| tenda | ac15 | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-5851 is a critical buffer overflow vulnerability in the Tenda AC15 router firmware version 15.03.05.19_multi. It occurs in the function fromadvsetlanip, which handles HTTP POST requests to the /goform/AdvSetLanip endpoint. The vulnerability arises because the lanMask parameter from the HTTP POST request is copied using the unsafe strcpy function without proper bounds checking, leading to a buffer overflow condition. This flaw can be exploited remotely without authentication. [1, 2]
How can this vulnerability impact me? :
This vulnerability can impact you by compromising the confidentiality, integrity, and availability of the affected Tenda AC15 router device. Since it is a buffer overflow exploitable remotely without authentication, an attacker can execute arbitrary code, potentially taking full control of the device. This can lead to device malfunction, data breaches, or network compromise. There are no known mitigations, and public exploits exist, making the risk significant. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring HTTP POST requests to the endpoint /goform/AdvSetLanip and inspecting the lanMask parameter for unusually large or malformed input that could trigger a buffer overflow. Network intrusion detection systems (NIDS) can be configured to alert on such suspicious POST requests. Specific commands are not provided in the resources, but using tools like curl or wget to send crafted POST requests to /goform/AdvSetLanip with varying lanMask values could help test for the vulnerability. Additionally, checking the firmware version of the Tenda AC15 device to see if it matches 15.03.05.19_multi can help identify vulnerable devices. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include replacing the affected Tenda AC15 device or upgrading its firmware if a fixed version becomes available. Since no known countermeasures or mitigations currently exist, avoiding exposure of the device to untrusted networks and restricting access to the device's management interface can reduce risk. Monitoring for exploit attempts and isolating vulnerable devices from critical network segments are also recommended. [2]