CVE-2025-29137
Published: 19 March 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2025-29137 is a buffer overflow vulnerability (CWE-120) affecting the Tenda AC7 V1.0 router on firmware version V15.03.06.44. The flaw occurs in the form_fast_setting_wifi_set function due to improper handling of the timeZone parameter, which can trigger a buffer overflow and lead to remote code execution (RCE). Published on 2025-03-19, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical.
An unauthenticated attacker with network access can exploit this vulnerability remotely by sending a specially crafted request targeting the timeZone parameter. The low attack complexity and lack of required privileges or user interaction enable straightforward exploitation, resulting in high-impact compromise of confidentiality, integrity, and availability on the device, including full RCE capabilities.
Mitigation details and technical analysis are available in the referenced advisory at https://github.com/Raining-101/IOT_cve/blob/main/tenda-ac7form_fast_setting_wifi_set%20timeZone.md.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Buffer overflow in public-facing web form handler (form_fast_setting_wifi_set) on router enables unauthenticated remote exploitation for RCE.