CVE-2025-15217

Publication date

2025-12-30 03:02:07

Family

VulDB

State

PUBLISHED

Description

A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely.