A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2025-4355. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.