What is the CVSS score of CVE-2025-5798?

CVE-2025-5798 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Ac8 Firmware are affected by CVE-2025-5798?

A critical remote code execution vulnerability affects Tenda AC8 routers (firmware 16.03.34.09) with no patch currently available.

Is there a public PoC exploit available for CVE-2025-5798?

Yes, a public proof-of-concept exploit is available for CVE-2025-5798. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2025-5798?

Within 24 hours: Inventory all Tenda AC8 devices on your network and isolate affected units from critical systems. Within 7 days: Implement network segmentation to restrict router administrative access and monitor for suspicious traffic patterns; evaluate replacing the device with a patched alternative. Within 30 days: Complete migration away from affected Tenda AC8 devices or await vendor patch release and apply immediately upon availability.

Ac8 Firmware CVE-2025-5798

EUVD-2025-17365 HIGH

Buffer Overflow (CWE-119)

2025-06-06 cna@vuldb.com

Buffer Overflow Ac8 Firmware Tenda

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17365

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

PoC Detected

Jun 09, 2025 - 19:08 vuln.today

Public exploit code

CVE Published

Jun 06, 2025 - 20:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Critical stack-based buffer overflow vulnerability in Tenda AC8 router firmware version 16.03.34.09, exploitable via the timeType parameter in the /goform/SetSysTimeCfg endpoint. An authenticated remote attacker can leverage this vulnerability to achieve arbitrary code execution with full system compromise (confidentiality, integrity, and availability impact). Public exploit disclosure and confirmed proof-of-concept availability indicate active threat potential, though exploitation requires valid authentication credentials.

Technical ContextAI

The vulnerability exists in the fromSetSysTime function of Tenda AC8 wireless router firmware, specifically within the web-based management interface accessible at /goform/SetSysTimeCfg. The root cause is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow condition where user-supplied input via the timeType parameter is not properly validated before being written to a stack-allocated buffer. The Tenda AC8 is a 802.11ac dual-band router running proprietary firmware; affected CPE would be cpe:2.3:o:tenda:ac8_firmware:16.03.34.09:*:*:*:*:*:*:*. The HTTP-based management interface accepts the timeType argument without sufficient bounds checking, allowing stack memory corruption and potential code execution through return-oriented programming (ROP) or direct shellcode injection.

RemediationAI

Immediate actions: (1) Check Tenda's official security advisories and firmware repository (https://www.tenda.com.cn/) for patched firmware versions beyond 16.03.34.09; if available, apply immediately via router admin interface (System Settings > Firmware Upgrade). (2) If patched firmware is unavailable, restrict access to the router's web management interface (port 80/443 default) using network segmentation, firewall rules, or disabling remote management (LAN-only access). (3) Enforce strong, unique administrative credentials (minimum 12 characters, non-default username) to reduce authentication bypass risk. (4) Monitor router logs for suspicious SetSysTimeCfg requests or timeType parameter anomalies. (5) As temporary mitigation, block or restrict inbound HTTP/HTTPS traffic to the router WAN interface if remote administration is not required. (6) Segment the router on a management VLAN if deployed in enterprise settings. Monitor Tenda's security page and CVE databases for patch availability; legacy router firmware often receives limited maintenance, so hardware replacement may be necessary if no patch emerges within 90 days.