CVE-2025-11525
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A vulnerability in Tenda AC7 router (version 15.03.06.44) affects an unknown function in the /goform/SetUpnpCfg file. Manipulation of the upnpEn argument leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit is publicly available.
Risk Assessment
A remote attacker could exploit this vulnerability to execute code or cause a denial of service, potentially leading to full control of the router and network compromise.
Recommendation
Immediately update the Tenda AC7 firmware to the latest available version if a patch is provided. Restricting administrative panel access to trusted IP addresses can reduce risk.
Other vulnerabilities in Tenda AC7
See all- CVE-2026-51846Critical
In Tenda AC7 firmware version 15.03.06.44, a stack buffer overflow vulnerability exists in the wanSpeed parameter of the /goform/AdvSetMacMtuWan route. This can lead to remote arbitrary code execution.
- CVE-2026-51845Critical
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the mac parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
- CVE-2026-51844Critical
A stack buffer overflow vulnerability was discovered in the Tenda AC7 router firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the cloneType parameter. An attacker can exploit this flaw to execute arbitrary code remotely or cause a denial of service.
- CVE-2026-51843Critical
A stack buffer overflow vulnerability exists in Tenda AC7 firmware version 15.03.06.44 in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter. An attacker can remotely crash the device or potentially execute arbitrary code.
- CVE-2025-11586High
A vulnerability was determined in Tenda AC7 (version 15.03.06.44). It affects an unknown function of the file /goform/setNotUpgrade. Manipulation of the newVersion argument causes a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been publicly disclosed.
- CVE-2025-11528High
A vulnerability was identified in Tenda AC7 (version 15.03.06.44). It affects an unknown function of the file /goform/saveAutoQos. Manipulation of the enable argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit is publicly available.
- CVE-2025-11524High
A flaw in Tenda AC7 router (version 15.03.06.44) affects some unknown processing of the /goform/SetDDNSCfg file. Manipulation of the ddnsEn argument causes a stack-based buffer overflow. The attack can be initiated remotely, and the exploit has been published.
- CVE-2025-11523Medium
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Original NVD description (English source)
A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS