CVE-2025-67073

critical · 9.8

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.

9.8

CVSS

0.7%

EPSS (exploit prob.)

51st

EPSS percentile

2025-12-17

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

Vendor	Product	Affected versions
tenda	ac10_firmware	16.03.10.20
tenda	ac10	4.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/johnathanhuutri/CVEReport/tree/master/CVE-2025-67073

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-67073