Every CVE Search/ Get API key

CVE-2025-29032

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB...

5.9 Medium

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
Low

Exploit likelihood

4.24%Up 4.2 points since Mar 15, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.9

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Record
CVE-2025-29032
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Weakness
CWE-120
Updated
2026-11-02
EUVDEUVD-2025-6428 5.9

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Record
EUVD-2025-6428
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-5xcr-jr93-3x2g 5.9

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB...

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Record
GHSA-5xcr-jr93-3x2g
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Weakness
CWE-120
Updated
2026-11-02
NVD 5.9

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Record
CVE-2025-29032
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Weakness
CWE-120
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-29032 is a medium vulnerability (CVSS 5.9) in Tendacn Ac9 Firmware, published March 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.24%, the 91st percentile. No source names a fixed version.

References

MoveEnter Open