CVE-2025-4810 | Tenda AC7 15.03.06.44 /goform/SetRebootTimer formSetRebootTimer reboot_time stack-based overflow

A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument reboot_time leads to stack-based buffer overflow.

This vulnerability is known as CVE-2025-4810. The attack can be launched remotely. Furthermore, there is an exploit available.