CVE-2025-15218
Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing a manipulation of the argument lanMask can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
| CWE | CWE-120 CWE-119 |
| Vendor | tenda |
| Product | ac10u |
| Published | Dec 30, 2025 |
| Last Updated | Feb 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for tenda ac10u
Be the first to know when new high vulnerabilities affecting tenda ac10u are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Tenda / AC10U
15.03.06.48 15.03.06.49
References
vuldb.com: https://vuldb.com/?id.338603 vuldb.com: https://vuldb.com/?ctiid.338603 vuldb.com: https://vuldb.com/?submit.725461 lavender-bicycle-a5a.notion.site: https://lavender-bicycle-a5a.notion.site/Tenda-AC10U-fromadvsetlanip-2d753a41781f800c86c8d388a38e8101?source=copy_link tenda.com.cn: https://www.tenda.com.cn/
Credits
🔍 yhryhryhr_miemie (VulDB User)