CVE-2025-11523
LOW6.3CVSS v3
6.5CVSS v2
3.74%
EPSS (exploit probability)
CWE-74CWE
Description
A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.