CVE-2025-9023 – Tenda AC7/AC18 Buffer Overflow in formSetSchedLed

CVE ID : CVE-2025-9023

Published : Aug. 15, 2025, 9:15 a.m. | 44 minutes ago

Description : A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 9.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…