CVE-2025-45427
Published: 23 April 2025
Summary
CVE-2025-45427 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Tenda Ac9 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2025-45427 is a stack-based buffer overflow vulnerability (CWE-121) affecting the security parameter of the /goform/WifiBasicSet endpoint in Tenda AC9 v1.0 routers running firmware V15.03.05.14_multi. The flaw permits remote arbitrary code execution and is rated 9.8 under CVSS 3.1.
An unauthenticated attacker with network access can supply a crafted request to the endpoint and achieve code execution on the device without user interaction or privileges.
The associated EPSS score remains flat at 0.0233 with no material increase after disclosure. The referenced GitHub disclosure provides technical details on the parameter handling issue but contains no vendor advisory or patch information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-12193
Vulnerability details
In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack overflow in /goform/WifiBasicSet web endpoint on Tenda AC9 router enables remote arbitrary code execution, facilitating exploitation of a public-facing application.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.