CVE-2025-4354 - Tenda DAP-1520 storage check_dws_cookie stack-based overflow

Back Back to CVE browser

HIGH

Tenda DAP-1520 storage check_dws_cookie stack-based overflow

Published May 6, 2025

8.7

HIGH

CVSS 4.0

EPSS 1.23%

Description

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Tenda Product n/a Default
n/a
- Version
  1.10B04_BETA02
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

n/a

Version	Status	Constraints
1.10B04_BETA02	affected	-

Remediation

No remediation recorded yet.

Weaknesses (3)

CWE-119

Buffer Overflow

CWE-121

CWE-787

Out-of-bounds Write

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13603
Advisory
https://github.com/Ghostsuzhijian/Iot-/blob/main/DAP-1520_replace_special_char/DAP-1520_replace_special_char.md
exploit
https://vuldb.com/?ctiid.307472
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.307472
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.564719
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13603		Advisory
https://github.com/Ghostsuzhijian/Iot-/blob/main/DAP-1520_replace_special_char/DAP-1520_replace_special_char.md		exploit
https://vuldb.com/?ctiid.307472		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.307472		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.564719		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/		product