Sign-up

ID

VAR-202508-2393


CVE

CVE-2025-9605


TITLE

Shenzhen Tenda Technology Co.,Ltd.  of  ac21  firmware and  ac23  Buffer error vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874

DESCRIPTION

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Shenzhen Tenda Technology Co.,Ltd. of ac21 firmware and ac23 The firmware contains a buffer error vulnerability and a stack-based buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2025-9605 // JVNDB: JVNDB-2025-012874

AFFECTED PRODUCTS

vendor:tendamodel:ac21scope:eqversion:16.03.08.16

Trust: 1.0

vendor:tendamodel:ac23scope:eqversion:16.03.08.16

Trust: 1.0

vendor:tendamodel:ac21scope: - version: -

Trust: 0.8

vendor:tendamodel:ac23scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874 // NVD: CVE-2025-9605

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com: CVE-2025-9605
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-012874
value: CRITICAL

Trust: 0.8

cna@vuldb.com: CVE-2025-9605
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

OTHER: JVNDB-2025-012874
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

cna@vuldb.com: CVE-2025-9605
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2025-012874
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874 // NVD: CVE-2025-9605

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-121

Trust: 1.0

problemtype:Buffer error (CWE-119) [ others ]

Trust: 0.8

problemtype: Stack-based buffer overflow (CWE-121) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874 // NVD: CVE-2025-9605

EXTERNAL IDS

db:NVDid:CVE-2025-9605

Trust: 2.6

db:VULDBid:321783

Trust: 1.8

db:JVNDBid:JVNDB-2025-012874

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874 // NVD: CVE-2025-9605

REFERENCES

url:https://github.com/xxricardo/iot-cve/blob/main/tenda/ac21/ac21v1.0re_v16.03.08.16.md

Trust: 1.8

url:https://github.com/xxricardo/iot-cve/blob/main/tenda/ac23/stack-based%20buffer%20overflow%20in%20tenda%20wi-fi%205%20router%20ac23%ef%bc%88ac23v1.0re_v16.03.07.52%ef%bc%89.md

Trust: 1.8

url:https://vuldb.com/?id.321783

Trust: 1.8

url:https://vuldb.com/?submit.636545

Trust: 1.8

url:https://vuldb.com/?submit.636548

Trust: 1.8

url:https://www.tenda.com.cn/

Trust: 1.8

url:https://vuldb.com/?ctiid.321783

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-9605

Trust: 0.8

sources: JVNDB: JVNDB-2025-012874 // NVD: CVE-2025-9605

SOURCES

db:JVNDBid:JVNDB-2025-012874
db:NVDid:CVE-2025-9605

LAST UPDATE DATE

2025-09-07T23:18:19.580000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2025-012874date:2025-09-04T05:51:00
db:NVDid:CVE-2025-9605date:2025-09-03T16:10:04.083

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2025-012874date:2025-09-04T00:00:00
db:NVDid:CVE-2025-9605date:2025-08-29T03:15:40.140