CVE-2025-25663
published 2025-02-20CVE-2025-25663: A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.51%
40.0th percentile
A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| msrc | azl3_tensorflow_2.11.1-1_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl2_tensorflow_2.11.1-1_on_cbl_mariner_2.0 | — | — |
| tenda | ac8_firmware | — | — |
Detection & IOCsextracted from sources · hover to see the quote
snort
alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:20; content:"/goform/WifiExtraSet"; fast_pattern; http.request_body; content:"wpapsk_crypto|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:cve,2025-10838; reference:url,community.emergingthreats.net/t/ruleset-update-summary-2025-10-14-v11039/3081; reference:cve,2025-25663; reference:url,www.cve.org/CVERecord/SearchResults?query=wpapsk_crypto; reference:cve,2025-5799; reference:cve,2025-7596; classtype:web-application-attack; sid:2065201; rev:1; metadata:affected_product Tenda, attack_target Networking_Equipment, tls_state plaintext, created_at 2025_10_15, cve CVE_2025_5799_CVE_2025_10838_CVE_2025_7596_CVE_2025_25663, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, tag Exploit, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2025_10_15, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application; target:dest_ip;)bytes
wpapsk_crypto=
- →Exploit uses HTTP POST method targeting the /goform/WifiExtraSet endpoint on Tenda AC8V4 devices; URI length is exactly 20 bytes.
- →Overflow is triggered via the wpapsk_crypto POST body parameter; a value of 100 or more characters (not containing '&') indicates an exploitation attempt.
- →Traffic is expected in plaintext (non-TLS); deploy detection at the network perimeter and internally.
- →The vulnerable function is SUB_0046AC38 inside the /goform/WifiExtraSet handler; stack-based buffer overflow is triggered by manipulating the wpapsk_crypto argument. ↗
- ·The Emerging Threats Snort rule (sid:2065201) covers four CVEs simultaneously (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799); a match does not uniquely confirm CVE-2025-25663 without additional context (e.g., target firmware version Tenda AC8V4 V16.03.34.06).
- ·The PCRE threshold of 100 characters for the wpapsk_crypto value is a heuristic; legitimate long values could produce false positives depending on the deployment environment.
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c649-279m-q7qv: A vulnerability was found in Tenda AC8V4 V16
ghsa_unreviewed·2025-02-21
CVE-2025-25663 [CRITICAL] CWE-120 GHSA-c649-279m-q7qv: A vulnerability was found in Tenda AC8V4 V16
A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.
Microsoft
TensorFlow has Null Pointer Error in TensorArrayConcatV2
vendor_msrc·2023-03-14·CVSS 7.5
CVE-2023-25663 [HIGH] CWE-476 TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow has Null Pointer Error in TensorArrayConcatV2
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
GitHub_M: GitHub_M
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https:
Suricata
ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)
suricata·2025-10-15·CVSS 7.4
CVE-2025-10838 [HIGH] ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)
ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Tenda WifiExtraSet wpapsk_crypto Parameter Buffer Overflow Attempt (CVE-2025-25663, CVE-2025-10838, CVE-2025-7596, CVE-2025-5799)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:20; content:"/goform/WifiExtraSet"; fast_pattern; http.request_body; content:"wpapsk_crypto|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:cve,2025-10838; reference:url,community.emergingthreats.net/t/ruleset-update-summary-2025-10-14-v11039/3081; reference:cve,2025-25663; reference:url,www.cve.org/CVERecord/SearchResults?query=wpapsk_crypto; reference:cve,2025-5799; refer
No public exploits indexed.
No writeups or analysis indexed.
2025-02-20
Published