Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-29032: Tenda AC9 Router Wi-Fi Passwords Exposed Due to Code Error

CVE-2025-29032 · published 1 year ago

Summary

A bug in the Tenda AC9 router's Wi-Fi settings can potentially allow hackers to access sensitive information, including Wi-Fi passwords. This issue is found in version 15.03.05.19(6318) of the software. To protect your router, it's recommended to update to the latest version as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
tendacn	ac9_firmware	15.03.05.19\(6318\) `cpe:2.3:o:tendacn:ac9_firmware:15.03.05.19\(6318\):::::::*`

Original advisory text

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

References

https://github.com/WhereisDoujo/CVE/issues/6 Exploit Issue Tracking Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.9 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-120Classic Buffer Overflow

Timeline

Published14 Mar 2025

Updated24 Oct 2026

First seen7 Mar 2026

Sources

CVE-2025-29032 · NVD

Track software like this

Free during beta