CVE-2025-10803: high-severity vulnerability in Tenda AC23
Tenda AC23 HTTP POST Request SetPptpServerCfg sscanf buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.8%
A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · AC23Related CVEs — Tenda AC23
In the same product, most dangerous first.
CVE-2023-2649HIGHTenda AC23 Service Port 7329 ate command injectionEPSS 9.7%CVE-2025-9605CRITICALTenda AC21/AC23 GetParentControlInfo stack-based overflowEPSS 6.0%CVE-2026-1420HIGHTenda AC23 WifiExtraSet buffer overflowEPSS 3.8%CVE-2026-0640HIGHTenda AC23 PowerSaveSet sscanf buffer overflowEPSS 3.5%CVE-2023-0782HIGHTenda AC23 httpd formGetSysToolDDNS out-of-bounds writeEPSS 1.5%CVE-2025-12596HIGHTenda AC23 saveParentControlInfo buffer overflowEPSS 1.2%