CVE-2025-11523

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSetLanip. The manipulation of the argument lanIp results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-77

Affected software

Vendor	Product	Versions
Tenda	AC7	15.03.06.44

References

https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/AdvSetLanip.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.327661Permissions Required, VDB Entry
https://vuldb.com/?id.327661Third Party Advisory, VDB Entry
https://vuldb.com/?submit.669849Third Party Advisory, VDB Entry
https://www.tenda.com.cn/Product

Timeline

Published: Oct 9, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-115248.8A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation CVE-2025-115258.8A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation o CVE-2025-115268.8A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Perfor CVE-2025-115278.8A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform/fast_setting_pppoe_CVE-2025-115288.8A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQos. The manipulation CVE-2025-115299.8A security flaw has been discovered in ChurchCRM up to 5.18.0. This impacts the function AuthMiddleware of the file src/ChurchCRM/Slim/Middl CVE-2025-11535.9A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format CVE-2025-115308.8A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /cms/admin/state.php.CVE-2025-115318.8HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This p CVE-2025-115325.3The Wisly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.0 due to missing CVE-2025-115339.8The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the pr CVE-2025-115349.3The affected Raisecom devices allow SSH sessions to be established without completing user authentication. This could allow attackers to gai