Vulnerability · Published Sep 15, 2025 · Assigned by VulDB

CVE-2025-10432Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow

Critical 9.8

In plain English

A critical-severity stack buffer overflow in AC1206 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)1.6%top 24.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Affected products (as reported)

Vendor	Product	Versions
Tenda	AC1206	15.03.06.23

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-323866 | Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow vdb-entry, technical-description
VDB-323866 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #647527 | Tenda AC1206 AC1206V1.0RTL_V15.03.06.23 Stack-based Buffer Overflow third-party-advisory
https://github.com/M4st3rYi/IoTVulPocs/blob/main/Tenda/AC1206/fromAdvSetMacMtuWan.md exploit
https://www.tenda.com.cn/ product