CVE-2025-51085
MediumCVSS 5.3Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
A stack overflow vulnerability was discovered in the Tenda AC8V4 router version V16.03.34.06 in the /goform/SetSysTimeCfg function. Manipulation of the timeZone and timeType arguments can lead to a stack-based buffer overflow.
Risk Assessment
An attacker could remotely cause a device crash or potentially execute arbitrary code, threatening network stability and data security.
Recommendation
Immediately update the Tenda AC8V4 router firmware to the latest available version if a patch is released. Otherwise, restrict access to the management interface to trusted networks only.
Original NVD description (English source)
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` and `timeType` leads to stack-based buffer overflow.