ID
VAR-202509-1746
CVE
CVE-2025-10803
TITLE
Shenzhen Tenda Technology Co.,Ltd. of ac23 Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. of ac23 The firmware contains a buffer error vulnerability and a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. It offers dual-band concurrent transmission rates up to 2033 Mbps, with the 5 GHz band reaching up to 1733 Mbps. It is suitable for high-bandwidth applications such as 4K video and online live streaming. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | tenda | model: | ac23 | scope: | lte | version: | 16.03.07.52 | Trust: 1.0 |
| vendor: | tenda | model: | ac23 | scope: | lte | version: | ac23 firmware 16.03.07.52 and earlier | Trust: 0.8 |
| vendor: | tenda | model: | ac23 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac23 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | ac23 | scope: | lte | version: | <=16.03.07.52 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-10803 | Trust: 3.2 |
| db: | VULDB | id: | 325161 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-014807 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-24480 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/lin-3-start/lin-cve/blob/main/tenda%20ac23-3/tenda%20ac23%20buffer%20overflow.md | Trust: 2.4 |
| url: | https://vuldb.com/?id.325161 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.654237 | Trust: 1.8 |
| url: | https://www.tenda.com.cn/ | Trust: 1.8 |
| url: | https://vuldb.com/?ctiid.325161 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-10803 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-24480 |
| db: | JVNDB | id: | JVNDB-2025-014807 |
| db: | NVD | id: | CVE-2025-10803 |
LAST UPDATE DATE
2025-11-19T23:31:47.450000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-24480 | date: | 2025-10-22T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-014807 | date: | 2025-10-01T02:48:00 |
| db: | NVD | id: | CVE-2025-10803 | date: | 2025-09-24T20:25:18.200 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-24480 | date: | 2025-10-21T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-014807 | date: | 2025-10-01T00:00:00 |
| db: | NVD | id: | CVE-2025-10803 | date: | 2025-09-22T15:15:39.670 |