What is the CVSS score of EUVD-2025-17379?

EUVD-2025-17379 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Ac9 Firmware are affected by EUVD-2025-17379?

A critical buffer overflow vulnerability in Tenda AC9 routers (CVE-2025-5839) allows remote attackers to execute arbitrary code with a public proof-of-concept exploit available.

Is there a public PoC exploit available for EUVD-2025-17379?

Yes, a public proof-of-concept exploit is available for EUVD-2025-17379. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate EUVD-2025-17379?

Within 24 hours: Identify and inventory all Tenda AC9 15.03.02.13 devices across your network using network scanning tools. Within 7 days: Implement network segmentation to isolate affected devices from critical systems and restrict remote access to the device management interface using firewall rules (block WAN access to port 80/443 on these devices). Within 30 days: Replace affected Tenda AC9 devices with alternative router models from vendors with confirmed security patch availability, or contact Tenda for firmware updates when available.

Ac9 Firmware EUVD-2025-17379

| CVE-2025-5839 HIGH

Buffer Overflow (CWE-119)

2025-06-07 cna@vuldb.com

Buffer Overflow Tenda Ac9 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 19:13 euvd

EUVD-2025-17379

Analysis Generated

Mar 14, 2026 - 19:13 vuln.today

PoC Detected

Jun 09, 2025 - 19:07 vuln.today

Public exploit code

CVE Published

Jun 07, 2025 - 18:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A critical buffer overflow vulnerability exists in Tenda AC9 router firmware version 15.03.02.13, affecting the POST request handler for LAN IP configuration. An authenticated attacker can exploit the lanMask parameter in the /goform/AdvSetLanip endpoint to trigger a buffer overflow, achieving remote code execution with full system compromise (confidentiality, integrity, and availability impact). Public exploit code is available and the vulnerability is actively exploitable with authenticated access.

Technical ContextAI

The vulnerability exists in the fromadvsetlanip function within the POST request handler component of Tenda AC9 wireless router firmware. The root cause is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic buffer overflow flaw where user-supplied input (lanMask parameter) is not properly validated before being written to a fixed-size buffer. The affected CPE is cpe:2.3:o:tenda:ac9_firmware:15.03.02.13:*:*:*:*:*:*:*. This is a network device management interface vulnerability where the web-based configuration endpoint fails to sanitize or bounds-check the lanMask input, allowing an attacker to overflow the buffer and potentially execute arbitrary code with the privileges of the web service (typically root on embedded systems).

RemediationAI

patch: Download and apply the latest Tenda AC9 firmware from https://www.tendacn.com/ or your regional Tenda support portal access_control_mitigation: Disable remote management (WAN access to web interface), use a strong, unique administrative password, and restrict LAN access to the management interface if possible through firewall rules monitoring: Enable router logging if available; monitor HTTP POST requests to /goform/AdvSetLanip for unusually long lanMask parameter values temporary_workaround: If management must be retained, access only over a trusted LAN segment or VPN