High severity · published Apr 18, 2025
CVE-2025-3786
Tenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflow
8.8
CVSS
1.1%
EPSS
No
On KEV
Description
A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument mac leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
AC15 · Tenda
15.03.05.0; 15.03.05.1; 15.03.05.2; 15.03.05.3; 15.03.05.4; 15.03.05.5; +14 more · source: vendor
AF
Ac15 Firmware · Tenda
15.03.05.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3786
Exploit
https://github.com/CH13hh/cve/tree/AC15WifiExtraSet
Permissions Required
https://vuldb.com/?ctiid.305609
Third Party Advisory
https://vuldb.com/?id.305609
Third Party Advisory
https://vuldb.com/?submit.553703
Product
https://www.tenda.com.cn/
More from AC15
9.8
CVE-2024-2855
Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow
9.8
CVE-2024-2852
Tenda AC15 saveParentControlInfo stack-based overflow
9.8
CVE-2024-2851
Tenda AC15 setsambacfg formSetSambaConf os command injection
9.8
CVE-2024-2850
Tenda AC15 saveParentControlInfo stack-based overflow
9.8
CVE-2024-2815
Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow