Overview
A high-severity vulnerability, CVE-2025-57078, has been identified in Tenda G3 v3.0br_V15.11.0.17 devices. This vulnerability results from a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. The security flaw presents a significant risk as it allows attackers to initiate a Denial of Service (DoS) attack via a specially crafted request, potentially leading to system compromise or data leakage.
Vulnerability Summary
CVE ID: CVE-2025-57078
Severity: High (CVSS v3 score: 7.5)
Attack Vector: Network
Privileges Required: Low
User Interaction: None
Impact: Denial of Service, Potential system compromise, and Data leakage
Affected Products
Share secrets securely
Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.
Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.
- • Encrypted identity
- • Private Spaces for organizations and teams
- • End-to-end encrypted chat, calls, files, and notes
- • Sensitive AI work and protected collaboration
- • Built for information that cannot leak
Our mission is to secure human work alongside AI.
Product | Affected Versions
Tenda G3 | v3.0br_V15.11.0.17
How the Exploit Works
The vulnerability stems from a stack overflow condition in the pppoeServerWhiteMacIndex parameter within the formModifyPppAuthWhiteMac function. This condition can be exploited by an attacker by sending a specially crafted request that exceeds the buffer limits, causing the system to crash or behave unexpectedly. This can lead to a Denial of Service (DoS) condition or potentially allow the attacker to execute arbitrary code on the device.
Conceptual Example Code
Below is a conceptual example of how an attacker might exploit this vulnerability:
POST /formModifyPppAuthWhiteMac HTTP/1.1
Host: target.example.com
Content-Type: application/x-www-form-urlencoded
pppoeServerWhiteMacIndex=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...In the above example, the “A” character is used to represent an overly large value being passed to the pppoeServerWhiteMacIndex parameter. The actual exploit would involve specifically crafted data designed to exploit the overflow condition.