Security Advisory

CVE-2025-9023

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-15 08:32:07
Last updated 2025-08-15 16:01:28
Assigner VulDB
State PUBLISHED

Description

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed of the file /goform/SetLEDCfg. The manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.