Description
Tenda中存在栈溢出漏洞。该漏洞是由于对发送到服务器的speed_dir参数验证不当造成的。
Tenda SetSpeedWan 栈溢出漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://gist.github.com/Swind1er/4176fdc25e415296904c9fb19e2f8293
https://db.gcve.eu/vuln/cnvd-2025-24294
https://zhuanlan.zhihu.com/p/2012589948381988618
https://www.cnvd.org.cn/flaw/show/CNVD-2025-31165
https://www.iotsec-zone.com/article/455
https://mdr.skyeye.qianxin.com/forum/share/1619
https://www.sciengine.com/doi/pdf/2E755BFB54834E28BB6475268701BE42
https://avd.aliyun.com/detail?id=AVD-2026-36785
https://www.sxxdckj.com/cms/a/Tenda-AC1200-setWanPpoe-han-shu-dui-zhan-yi-chu-lou-dong.html
https://cloud.tencent.com/developer/article/2613793
https://nvd.nist.gov/vuln/detail/CVE-2025-60337
https://github.com/advisories/GHSA-4q8q-fhx3-4r8q
https://www.variotdbs.pl/vuln/VAR-202510-2086/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-43395
https://www.redpacketsecurity.com/cve-alert-cve-2025-60337-n-a-n-a/
https://cve.imfht.com/detail/CVE-2025-60337
https://anonhaven.com/cve/CVE-2025-60337/
https://access.redhat.com/security/cve/cve-2025-60337
https://rules.evebox.org/pub/et/open/2063029