CVE-2025-51087
HighCVSS 8.6Exploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
A stack buffer overflow vulnerability was discovered in the Tenda AC8V4 router with firmware version V16.03.34.06 in the /goform/saveParentControlInfo function. Manipulation of the time argument leads to a stack-based buffer overflow.
Risk Assessment
An attacker could remotely cause a device crash or potentially execute arbitrary code, leading to full compromise of the router and network security.
Recommendation
Immediately update the Tenda AC8V4 firmware to the latest available version if a patch is released. In the meantime, restrict access to the administrative interface to trusted networks only.
Original NVD description (English source)
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow.