What is the CVSS score of CVE-2025-51087?

CVE-2025-51087 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L. EPSS exploitation probability: 8.4%.

Which versions of Tenda AC8 are affected by CVE-2025-51087?

Tenda AC8V4 routers (firmware V16.03.34.06 and earlier) are vulnerable to remote unauthenticated buffer overflow attacks with publicly available exploit code and no vendor patch currently available.

Is there a public PoC exploit available for CVE-2025-51087?

Yes, a public proof-of-concept exploit is available for CVE-2025-51087. Prioritise patching immediately. EPSS: 8.4%.

How to fix or mitigate CVE-2025-51087?

Within 24 hours: Identify and inventory all Tenda AC8V4 routers; determine which are exposed to untrusted networks and prioritize those for immediate action. Within 7 days: Implement network segmentation to restrict direct WAN-side access to affected routers; disable remote web management on the affected devices; deploy firewall rules blocking external traffic to port 80/443 on these devices unless operationally essential. Within 30 days: Develop and execute hardware replacement plan with alternative router models; establish policy prohibiting Tenda AC8V4 devices in production environments; validate remediation through penetration testing of network perimeter.

Tenda AC8 CVE-2025-51087

HIGH

Stack-based Buffer Overflow (CWE-121)

2025-07-24 cve@mitre.org

Buffer Overflow Tenda Stack Overflow Ac8 Firmware

8.6

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

vuln.today AI

9.8 CRITICAL

Unauthenticated low-complexity web-reachable stack overflow on an unmitigated embedded device; I raise I/A to H since such overflows realistically yield RCE and device crash, keeping PR:N per the stated vector.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 01:44 vuln.today

DescriptionCVE.org

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow.

AnalysisAI

Stack-based buffer overflow in the Tenda AC8V4 router (firmware V16.03.34.06) lets remote attackers corrupt memory by supplying an oversized 'time' parameter to the /goform/saveParentControlInfo web endpoint. Per the published CVSS vector the flaw is network-reachable with no authentication (PR:N) and low complexity, and publicly available exploit code exists (no public exploit identified as actively exploited in CISA KEV). The EPSS score of 8.43% (94th percentile) marks it as elevated exploitation likelihood relative to the CVE population.

Technical ContextAI

The affected component is the embedded HTTP administration server (the httpd/goform handler) running on the Tenda AC8V4, a consumer dual-band Wi-Fi router. The /goform/saveParentControlInfo handler processes parental-control configuration submissions; the 'time' argument is copied into a fixed-size stack buffer without adequate bounds checking, the classic CWE-121 stack-based buffer overflow root cause. On these MIPS/ARM SOHO firmware images web parameters are typically handled by unsafe C string operations (strcpy/sprintf) into local stack arrays, and such devices frequently lack modern exploit mitigations (ASLR/stack canaries/NX), which raises the practical exploitability of a stack smash from denial-of-service toward control-flow hijack. The CPE cpe:2.3:o:tenda:ac8_firmware:16.03.34.06 pins the vulnerable build precisely.

RemediationAI

No vendor-released patch is identified at time of analysis, and no fixed firmware version appears in the source data, so an exact upgrade target cannot be cited without inventing one - monitor Tenda's support portal for a firmware release superseding V16.03.34.06 and apply it once published. As compensating controls, disable remote/WAN-side web administration so the /goform interface is not reachable from the internet (trade-off: loses remote management convenience); restrict LAN access to the router admin interface to trusted management hosts via ACLs or a management VLAN; and place the device behind a firewall that blocks unsolicited inbound access to the HTTP admin port. Where the parental-control feature is unused, avoiding/limiting exposure of that configuration workflow reduces reachable attack surface, though it does not remove the vulnerable code. Consult the researcher write-up at https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51087.md for endpoint-specific detail.