{"id":59478,"date":"2025-07-18T22:55:01","date_gmt":"2025-07-18T22:55:01","guid":{"rendered":""},"modified":"2025-08-08T18:01:51","modified_gmt":"2025-08-09T00:01:51","slug":"cve-2025-7544-critical-stack-based-buffer-overflow-in-tenda-ac1206","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-7544-critical-stack-based-buffer-overflow-in-tenda-ac1206\/","title":{"rendered":"CVE-2025-7544: Critical Stack-Based Buffer Overflow in Tenda AC1206<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity landscape is constantly evolving, with new vulnerabilities being discovered on a regular basis. The latest critical vulnerability to be uncovered is CVE-2025-7544, which affects Tenda AC1206 software version 15.03.06.23. This vulnerability is of particular concern due to its severity<\/a> rating of 8.8, indicating that it’s capable of causing significant harm. The vulnerability lies in the function formSetMacFilterCfg of the file<\/a> \/goform\/setMacFilterCfg and can be exploited remotely, making it a major security risk for any system running the affected software.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-7544
\nSeverity: Critical (8.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n