CVE-2025-15217 | Tenda AC23 16.03.07.52 HTTP POST Request formSetPPTPUserList list buffer overflow

A vulnerability marked as critical has been reported in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing manipulation of the argument list results in buffer overflow.

This vulnerability is identified as CVE-2025-15217. The attack can be initiated remotely. Additionally, an exploit exists.