What is the CVSS score of CVE-2025-5629?

CVE-2025-5629 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Ac10 Firmware are affected by CVE-2025-5629?

Tenda AC10 routers (models up to 15.03.06.47) contain a critical remote code execution vulnerability with no available patch.

How to fix or mitigate CVE-2025-5629?

Within 24 hours: Inventory all Tenda AC10 devices in use and assess network exposure; isolate affected devices from critical systems if possible. Within 7 days: Implement network segmentation to restrict router administrative access; disable PPTP server functionality if not operationally required; deploy WAF/IPS rules to block malicious SetPptpServerCfg requests. Within 30 days: Develop device replacement timeline; evaluate alternative router solutions with active vendor support; monitor for patch release from Tenda.

Ac10 Firmware CVE-2025-5629

EUVD-2025-16953 HIGH

Buffer Overflow (CWE-119)

2025-06-05 cna@vuldb.com

Buffer Overflow Ac10 Firmware Tenda

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 17:53 euvd

EUVD-2025-16953

Analysis Generated

Mar 14, 2026 - 17:53 vuln.today

CVE Published

Jun 05, 2025 - 03:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A critical buffer overflow vulnerability exists in Tenda AC10 routers (versions up to 15.03.06.47) in the PPTP server configuration handler that allows authenticated remote attackers to execute arbitrary code or cause denial of service. The vulnerability affects the startIp/endIp parameters in the /goform/SetPptpServerCfg HTTP endpoint, requires valid credentials but no user interaction, and has publicly disclosed exploit code available, making it actively exploitable in real-world deployments.

Technical ContextAI

The vulnerability exists in the HTTP request handler for PPTP (Point-to-Point Tunneling Protocol) server configuration on Tenda AC10 WiFi routers. The formSetPPTPServer function in /goform/SetPptpServerCfg fails to properly validate and bounds-check the startIp and endIp input parameters before copying them into a fixed-size buffer, resulting in a classic stack or heap-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer). PPTP is a legacy VPN tunneling protocol often configured via web administration interfaces on consumer-grade routers. The HTTP handler processes user-supplied IP address ranges without adequate input sanitization, allowing an attacker with valid HTTP authentication credentials to overflow adjacent memory and potentially redirect execution flow.

RemediationAI

Immediate remediation: (1) Update Tenda AC10 router firmware to version 15.03.06.48 or later if available from Tenda; check Tenda's official firmware download page for AC10 updates; (2) If no patch is available, disable PPTP server functionality entirely via the router's web administration interface if VPN access is not required; (3) Restrict HTTP administrative access to the router to trusted networks only (limit WAN access to administration interface); (4) Change default/weak administrative credentials immediately; (5) Consider replacing the device with a more actively maintained router if Tenda does not provide a timely firmware patch. Contact Tenda support at their official channels for patch availability confirmation and timeline. Monitor Tenda security advisories for official patch release.