CVE-2025-4897: falha de alta gravidade em Tenda A15
Tenda A15 HTTP POST Request multimodalAdd buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 7.2%
A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Tenda · A15CVEs relacionadas — Tenda A15
No mesmo produto, das mais perigosas para as menos.
CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 3.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0534HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0531HIGHTenda A15 Web-based Management Interface setBlackRule stack-based overflowEPSS 1.7%CVE-2025-12619HIGHTenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflowEPSS 0.9%