Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-22946

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution.

Published

2025-01-10T15:15:16.710

Last Modified

2025-04-09T18:35:44.810

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Secondary
CWE-120

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	tenda	ac9_firmware	15.03.05.19	Yes
Hardware	tenda	ac9	1.0	No

References

https://noisy-caravel-a9a.notion.site/Tenda_AC9V1-0_V15-03-05-19_formSetDeviceName_sprintf_bof-16f898c94eac8057afcbceb63fda7d24 Exploit, Third Party Advisory ([email protected])