Quick answers
- Is CVE-2025-55564 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-55564 being exploited in the wild.
- How severe is CVE-2025-55564?
- High severity, with a CVSS score of 7.5, published 21 August 2025.
- Which products and versions are affected?
- Tenda Ac15 Firmware 15.03.05.19_multi_TD01.
- Is there a fix for CVE-2025-55564?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2025-55564 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2025-55564?
- Check whether you run Tenda AC15 or Tenda Ac15 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A stack-based buffer overflow (CWE-121) exists in Tenda AC15 firmware version 15.03.05.19_multi_TD01. The vulnerability is located within the 'fromSetIpMacBind' function, which fails to properly validate the length of the 'list' parameter provided in a POST request to '/goform/SetIpMacBind'. An unauthenticated remote attacker can exploit this by sending an oversized payload in the 'list' parameter, leading to memory corruption. While the reported impact is primarily service unavailability (DoS), stack overflows of this nature can potentially be leveraged for remote code execution (RCE). No official patch is currently noted in the advisory.
Affected products
- Tenda AC15 firmware 15.03.05.19_multi_TD01
Timeline
- 2025-08-21: advisory
- 2025-08-21: disclosed