9.8
CVSSv3

CVE-2025-29137

CVSSv4: NA | CVSSv3: 9.8 | CVSSv2: NA | VMScore: 1000 | EPSS: 0.00061 | KEV: Not Included
Published: 19/03/2025 Updated: 19/03/2025

Vulnerability Summary

Buffer Overflow in Tenda AC7 Wireless Router Enables Remote Code Execution

Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the form_fast_setting_wifi_set function, which can cause RCE.