CVE-2025-67074

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Dec 17, 2025

CISA due date

—

The record

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serverName`) to /goform/AdvSetMacMtuWan.

Affected packages

Ecosystem	Package	Introduced	Fixed