Critical · 9.8 CVE-2023-25220 EUVD-2023-29183GHSA-qc2w-qcmx-m375

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows …

Published Apr 7, 2023 · Updated Feb 12, 2025 · Assigned by mitre

Description

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md