CVE Alert: CVE-2025-11386 – Tenda – AC15
CVE-2025-11386
HIGHNo exploitation known
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS v3.1 (8.8)
Vendor
Tenda
Product
AC15
Versions
15.03.05.18
CWE
CWE-121, Stack-based Buffer Overflow
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
Published
2025-10-07T10:02:06.965Z
Updated
2025-10-07T10:02:06.965Z
References
AI Summary Analysis
Risk verdict
Why this matters
Most likely attack path
Who is most exposed
Detection ideas
- Look for repeated failed or unusual POST requests targeting the DDNS/SetDDNSCfg endpoint or related parameters.
- Monitor for device instability: crashes, reboots, or memory corruption indicators and stack traces in logs.
- SAG/IPS alerts or signatures targeting known PoC exploit patterns; anomalous outbound DNS activity from the device.
- Unexpected configuration changes to DNS or DDNS settings.
- Unusual traffic bursts to DNS or dynamic-update services from the device.
Mitigation and prioritisation
- Apply vendor-provided firmware patch to the fixed release as a priority; verify patch integrity before rollout.
- If patching is pending, block or restrict WAN/remote management access, and limit device exposure via network segmentation.
- Implement strict egress controls and monitor DNS-related activity; enable logging of configuration changes.
- Plan a controlled patch window with backups and rollback testing; ensure change-control approvals.
- Consider compensating controls such as disabling unnecessary services and restricting device access to trusted admin networks.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
