CVE-2025-51088
MediumCVSS 5.3Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
A stack overflow vulnerability was discovered in Tenda AC8V4 firmware version V16.03.34.06 in the /goform/WifiGuestSet function. Manipulation of the shareSpeed argument leads to a stack-based buffer overflow.
Risk Assessment
An attacker can remotely crash the device or potentially gain control, threatening the security of a home or small business network.
Recommendation
Immediately update the Tenda AC8V4 firmware to the latest available version if a patch is released. Otherwise, consider replacing the device with a model not affected by this vulnerability.
Original NVD description (English source)
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.