CVE-2025-4897: high-severity vulnerability in Tenda A15
Tenda A15 HTTP POST Request multimodalAdd buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 7.2%
A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Tenda · A15Related CVEs — Tenda A15
In the same product, most dangerous first.
CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 3.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0534HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0531HIGHTenda A15 Web-based Management Interface setBlackRule stack-based overflowEPSS 1.7%CVE-2025-12619HIGHTenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflowEPSS 0.9%