VULNERABILITY INTELLIGENCE

CVE-2025-4897

CVSS score8.8 HIGH

EPSS probability7.22%

CISA KEVNot currently listed

Published2025-05-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness classification

cna@vuldb.com: CWE-119
nvd@nist.gov: CWE-120

Primary references

cna@vuldb.com — Broken Link
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Product