CVE-2025-11387
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A stack-based buffer overflow vulnerability was determined in Tenda AC15 version 15.03.05.18. Manipulation of the Password argument in /goform/fast_setting_pppoe_set allows remote attacks, and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can exploit this vulnerability to cause a buffer overflow, potentially leading to code execution or device crash. The public availability of the exploit increases the risk.
Recommendation
Update the Tenda AC15 firmware to the latest version or restrict access to the management interface. Monitor the vendor for patches.
Other vulnerabilities in Tenda AC15
See all- CVE-2026-11493Medium
A weakness was identified in Tenda AC15 firmware version 15.03.05.19 in the Samba component. Manipulation of the /etc_ro/smb.conf file leads to weak password requirements. The attack is only possible within the local network, has high complexity, and is difficult to exploit, but the exploit is publicly available.
- CVE-2026-5830High
In Tenda AC15 version 15.03.05.18, the function websGetVar in /goform/SysToolChangePwd is vulnerable to stack-based buffer overflow via manipulation of arguments oldPwd/newPwd/cfmPwd. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2025-11388High
A stack-based buffer overflow vulnerability was identified in Tenda AC15 version 15.03.05.18. Manipulation of the newVersion argument in /goform/setNotUpgrade allows remote attacks, and the exploit is publicly available.
- CVE-2025-11386High
A stack-based buffer overflow vulnerability was found in Tenda AC15 version 15.03.05.18. Manipulation of the ddnsEn argument in /goform/SetDDNSCfg allows remote attacks, and the exploit has been publicly disclosed.
- CVE-2025-55564High
A stack overflow vulnerability exists in the Tenda AC15 router firmware version 15.03.05.19_multi_TD01 in the fromSetIpMacBind function via the list parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
Original NVD description (English source)
A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_setting_pppoe_set. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS