CVE-2025-51082
published 2025-07-24CVE-2025-51082: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to…
PriorityP333medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.41%
33.5th percentile
Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to stack-based buffer overflow.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | ac8_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Tenda AC1206 fast_setting_wifi_set timeZone or ssid parameter Buffer Overflow Attempt (CVE-2025-3328, CVE-2025-51082))
suricata·2025-04-09·CVSS 8.7
CVE-2025-3328 [HIGH] ET WEB_SPECIFIC_APPS Tenda AC1206 fast_setting_wifi_set timeZone or ssid parameter Buffer Overflow Attempt (CVE-2025-3328, CVE-2025-51082))
ET WEB_SPECIFIC_APPS Tenda AC1206 fast_setting_wifi_set timeZone or ssid parameter Buffer Overflow Attempt (CVE-2025-3328, CVE-2025-51082))
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Tenda AC1206 fast_setting_wifi_set timeZone or ssid parameter Buffer Overflow Attempt (CVE-2025-3328, CVE-2025-51082))"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:29; content:"/goform/fast_setting_wifi_set"; fast_pattern; http.request_body; pcre:"/^.*?(?:ssid|timeZone)\x3d[^&]{100,}(?:&|$)/R"; reference:cve,2025-3328; reference:url,github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set_time/time.md; reference:url,github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set/form_fast_setting_wifi_set.md; refe
No public exploits indexed.
No writeups or analysis indexed.
2025-07-24
Published