{"id":6591,"date":"2025-06-09T00:57:15","date_gmt":"2025-06-09T00:57:15","guid":{"rendered":"http:\/\/localhost\/?p=6591"},"modified":"2025-06-09T00:57:15","modified_gmt":"2025-06-09T00:57:15","slug":"tenda-ac5-setreboottimer-formsetreboottimer-stack-based-overflow","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6591","title":{"rendered":"Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nTenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-09T05:31:07.242Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nTenda<\/td>\n<\/tr>\n
Product<\/th>\nAC5<\/td>\n<\/tr>\n
Version<\/th>\n15.03.06.47<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n8.7 (HIGH)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA critical stack-based buffer overflow vulnerability in Tenda AC5 routers allows remote attackers to exploit the formSetRebootTimer function via the rebootTime argument. This can lead to remote code execution and system compromise. The exploit is publicly available, increasing the risk of attack.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
Vendor<\/th>\nTenda<\/td>\n<\/tr>\n
Product<\/th>\nTenda AC5<\/td>\n<\/tr>\n
Affected Version<\/th>\n15.03.06.47<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n