VulnerabilityAnalyzed

CVE-2025-5795

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47.

HIGH 7.4EPSS 0.96%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0: 7.4 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.96% probability · 60th percentile
CISA KEV: Not listed
Weakness: CWE-119, CWE-120
Affected: tenda/ac5 firmware
Source: cna@vuldb.com

References

https://lavender-bicycle-a5a.notion.site/Tenda-AC5-fromadvsetlanip-20a53a41781f805389dcd51fa04bc530?source=copy_linkExploit, Third Party Advisory
https://vuldb.com/?ctiid.311349Permissions Required
https://vuldb.com/?id.311349Third Party Advisory, VDB Entry
https://vuldb.com/?submit.591224Third Party Advisory, VDB Entry
https://www.tenda.com.cn/Product
https://lavender-bicycle-a5a.notion.site/Tenda-AC5-fromadvsetlanip-20a53a41781f805389dcd51fa04bc530Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.