CVE-2025-8178— Tenda AC10 RequestsProcessLaid heap-based overflow
Quick assessment
Affected
Tenda AC10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tenda AC10是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC10 16.03.10.13版本存在安全漏洞，该漏洞源于文件/goform/RequestsProcessLaid中参数device1D导致堆缓冲区溢出。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-8178
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda AC10 RequestsProcessLaid heap-based overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Tenda AC10 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tenda AC10是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC10 16.03.10.13版本存在安全漏洞，该漏洞源于文件/goform/RequestsProcessLaid中参数device1D导致堆缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-8178
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8178
请登录查看更多情报信息。
Same Patch Batch · Tenda · 2025-07-26 · 3 CVEs total
| CVE-2025-8180 | 8.8 HIGH | Tenda CH22 deleteUserName formdeleteUserName buffer overflow |
| CVE-2025-8182 | 5.6 MEDIUM | Tenda AC18 Samba smb.conf weak password |
IV. Related Vulnerabilities
Same product: AC10
-
CVE-2026-19924
Tenda AC10 httpd R7WebsSecurityHandler improper authenticati -
CVE-2026-16248
Tenda AC10 httpd/netctrl AdvSetLanip fromAdvSetLanip stack-b -
CVE-2026-5550
Tenda AC10 httpd fromSysToolChangePwd stack-based overflow -
CVE-2026-5549
Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-code -
CVE-2026-5548
Tenda AC10 httpd fromSysToolChangePwd stack-based overflow
Same vendor: Tenda
-
CVE-2026-78063
Tenda CH22 editFileName formeditFileName command injection -
CVE-2026-77031
Tenda CH22 formcreateFileName command injection -
CVE-2026-19924
Tenda AC10 httpd R7WebsSecurityHandler improper authenticati -
CVE-2026-19824
Tenda W20E addIpMacBind ipMacBindListStore stack-based overf -
CVE-2026-19823
Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-bas
Same weakness: CWE-122
-
CVE-2026-62381
luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overf -
CVE-2026-50538
libvncclient Tight decoder has an attacker-controlled heap o -
CVE-2026-55893
Capstone SH disassembler `set_reg_n` heap buffer overflow vi -
CVE-2026-70654
libvips: A well-crafted PPM image processed via a custom sou -
CVE-2026-70653
libvips: Possible heap-based buffer read overflow when decod
V. Comments for CVE-2025-8178
No comments yet