CVE-2025-3167

CWE-4043 documents3 sources
Severity
7.1HIGH
EPSS
0.3%
top 45.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda Ac23Tenda Ac23 Firmware
Timeline
PublishedApr 3

Description

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ac2316.03.07.52
▶NVDtenda/ac23_firmware16.03.07.52

🔴Vulnerability Details

2
CVEList
Tenda AC23 API Interface VerAPIMant denial of service↗2025-04-03
▶
GHSA
GHSA-wgx6-p2v7-c87g: A vulnerability, which was classified as problematic, has been found in Tenda AC23 16↗2025-04-03
▶