CVE-2025-67074
Buffer Overflow in Tenda AC10V4 HTTPD Enables Remote Code Execution
Publication date: 2025-12-17
Last updated on: 2025-12-18
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | ac10v4.0 | 16.03.10.20 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in the function fromAdvSetMacMtuWan of the bin httpd service in Tenda AC10V4.0 V16.03.10.20. It allows remote attackers to send a specially crafted POST request with a malicious payload in the 'serverName' field to the /goform/AdvSetMacMtuWan endpoint, which can cause a denial of service or potentially allow code execution.
How can this vulnerability impact me? :
Exploitation of this vulnerability can lead to denial of service, making the affected device or service unavailable. Additionally, it may allow remote attackers to execute arbitrary code, potentially compromising the device and any network it is connected to.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for POST requests to the /goform/AdvSetMacMtuWan endpoint containing a crafted payload in the 'serverName' field. You can use network monitoring tools like tcpdump or Wireshark to capture such traffic. For example, a tcpdump command to filter such POST requests could be: tcpdump -A -s 0 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' and then grep for '/goform/AdvSetMacMtuWan' and 'serverName'. Additionally, inspecting web server logs for suspicious POST requests to this endpoint may help detect exploitation attempts.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the /goform/AdvSetMacMtuWan endpoint, such as by implementing firewall rules to limit access to trusted IP addresses only. Additionally, updating the Tenda AC10V4.0 device firmware to a version that patches this vulnerability is recommended once available. As a temporary measure, monitoring and blocking suspicious POST requests with crafted 'serverName' payloads can help reduce risk.