CVE-2025-51082
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A stack overflow vulnerability was discovered in Tenda AC8V4 firmware version V16.03.34.06 in the /goform/fast_setting_wifi_set function. Manipulation of the timeZone argument leads to a stack-based buffer overflow.
Risk Assessment
An attacker can remotely crash the device or potentially execute arbitrary code, threatening network stability and data security.
Recommendation
Immediately update the Tenda AC8V4 firmware to the latest available version if a patch is released. Otherwise, restrict administrative interface access to trusted networks only.
Original NVD description (English source)
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to stack-based buffer overflow.