CVE-2025-3167: A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interf...

Summary

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated re...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
tenda	ac23_firmware	16.03.07.52 `cpe:2.3:o:tenda:ac23_firmware:16.03.07.52:::::::*`

Original advisory text

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interf...

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some unknown processing of the file /goform/VerAPIMant of the component API Interface. The manipulation of the argument getuid leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

https://vuldb.com/?ctiid.303113 Permissions Required VDB Entry
https://vuldb.com/?id.303113 Third Party Advisory VDB Entry
https://vuldb.com/?submit.543150 Third Party Advisory VDB Entry
https://www.tenda.com.cn/ Product
https://github.com/LZY0522/CVE/blob/main/CVE_1.md Exploit Third Party Advisory