Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-4897

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

  • Published: May 18, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-4897
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

Software From Fixed in
tenda / a15_firmware 15.13.07.09 15.13.07.09.x
tenda / a15_firmware 15.13.07.13 15.13.07.13.x