CVE-2025-67073

Critical · 9.8

CVSS

9.8

EPSS

0.7%

Published

Dec 17, 2025

CISA due date

—

The record

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.

Affected packages

Ecosystem	Package	Introduced	Fixed