Tenda AC7 SetFirewallCfg formSetFirewallCfg stack-based overflow

8.7 CVSS

Vulnerability Description

A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1851

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Raining101 (VulDB User)

References

More from Tenda

View All →

CVE-2025-9828

Tenda CP6 uhttp sub_2B7D04 risky encryption

Medium 6.3

CVE-2025-9813

Tenda CH22 SetSambaConf formSetSambaConf buffer overflow

High 8.7

CVE-2025-9812

Tenda CH22 exeCommand formexeCommand buffer overflow

High 8.7

CVE-2025-9806

Tenda F1202 Administrative shadow hard-coded credentials

Low 1.8

CVE-2025-9791

Tenda AC20 fromAdvSetMacMtuWan stack-based overflow

High 8.7

Affected Vendor

Tenda

View all reports →

Affected Software

AC7

Vulnerable Versions:

15.03.06.0, 15.03.06.1, 15.03.06.2, 15.03.06.3, 15.03.06.4, 15.03.06.5, 15.03.06.6, 15.03.06.7, 15.03.06.8, 15.03.06.9, 15.03.06.10, 15.03.06.11, 15.03.06.12, 15.03.06.13, 15.03.06.14, 15.03.06.15, 15.03.06.16, 15.03.06.17, 15.03.06.18, 15.03.06.19, 15.03.06.20, 15.03.06.21, 15.03.06.22, 15.03.06.23, 15.03.06.24, 15.03.06.25, 15.03.06.26, 15.03.06.27, 15.03.06.28, 15.03.06.29, 15.03.06.30, 15.03.06.31, 15.03.06.32, 15.03.06.33, 15.03.06.34, 15.03.06.35, 15.03.06.36, 15.03.06.37, 15.03.06.38, 15.03.06.39, 15.03.06.40, 15.03.06.41, 15.03.06.42, 15.03.06.43, 15.03.06.44