Cyber Posture

CVE-2025-29135

CriticalPublic PoC

Published: 24 March 2025

Published
24 March 2025
Modified
01 April 2025
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0130 79.8th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

Security Summary

CVE-2025-29135 is a stack-based buffer overflow vulnerability (CWE-121) in the Tenda AC7 router running firmware version V15.03.06.44. The flaw occurs in the formWifiBasicSet function, where the security parameter can be abused to trigger a stack overflow, potentially allowing arbitrary code execution. Published on March 24, 2025, it carries a CVSS v3.1 base score of 9.8, reflecting its critical severity.

The vulnerability can be exploited by a remote attacker over the network with no required privileges, low complexity, and no user interaction (AV:N/AC:L/PR:N/UI:N). Successful exploitation grants high-impact confidentiality, integrity, and availability consequences (C:H/I:H/A:H) within the unchanged scope (S:U), enabling the attacker to execute arbitrary code on the affected device.

Proof-of-concept details are documented in public GitHub repositories by Raining-101, including a Gist at https://gist.github.com/Raining-101/1651dd3901efdbb38d94a156a54bbc62 and Markdown files at https://github.com/Raining-101/IOT_cve/blob/main/a7_formWifiBasic_Setsecurity_stackoverflow.md. No vendor advisories or patches are referenced in the available information.

Details

CWE(s)
CWE-121

Affected Products

tenda
ac7 firmware
15.03.06.44

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

Stack-based buffer overflow in router web form handling function (formWifiBasicSet) enables remote unauthenticated arbitrary code execution on a public-facing network device.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References