CVE-2025-29217

MediumCVSS 6.5

Published: 20/03/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

A stack overflow vulnerability was discovered in the Tenda W18E v2.0 running firmware v16.01.0.11, specifically in the wifiSSID parameter at the /goform/setModules endpoint. Attackers can cause a Denial of Service (DoS) by sending a crafted POST request.

Risk Assessment

This vulnerability allows remote attackers to crash the device, leading to network disruption and loss of service availability for users.

Recommendation

It is recommended to immediately update the Tenda W18E firmware to the latest version if available, or restrict access to the management interface to trusted networks only.

Original NVD description (English source)

Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.