CVE-2025-15218 | Tenda AC10U 15.03.06.48/15.03.06.49 POST Request Parameter /goform/AdvSetLanip fromadvsetlanip lanMask buffer overflow

A vulnerability described as critical has been identified in Tenda AC10U 15.03.06.48/15.03.06.49. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Parameter Handler. Executing manipulation of the argument lanMask can lead to buffer overflow.

This vulnerability is tracked as CVE-2025-15218. The attack can be launched remotely. Moreover, an exploit is present.