Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-63835 EUVD-2025-48946GHSA-2mgg-5ppq-j685

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid para…

Published Nov 10, 2025 · Updated Nov 18, 2025 · Assigned by mitre

Description

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to denial of service (device crash) or potential remote code execution.

References