CVE-2023-25217 — Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function

Back Back to CVE browser

CRITICAL

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function

Published Apr 7, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.87%

Description

Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.87% 0.00870

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00870

Score over time

2023–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.87% (0.00870)	57.31th	v5 (v2026.06.15)
Jun 15, 2026	0.87% (0.00870)	53.91th	v5 (v2026.06.15)
Mar 17, 2025	0.58% (0.00578)	66.93th	v4 (v2025.03.14)
Dec 12, 2024	0.21% (0.00207)	59.58th	v3 (v2023.03.01)
May 9, 2024	0.20% (0.00198)	57.11th	v3 (v2023.03.01)
Apr 13, 2024	0.21% (0.00207)	58.25th	v3 (v2023.03.01)
Apr 14, 2023	0.13% (0.00134)	47.11th	v3 (v2023.03.01)
Apr 7, 2023	0.06% (0.00060)	23.39th	v3 (v2023.03.01)