CVE-2025-61498

Published Oct 30, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Tenda ac8 Firmware
CPEs cpe:2.3:h:tenda:ac8:2.0:*:*:*:*:*:*:*
cpe:2.3:o:tenda:ac8_firmware:03.03.10.01:*:*:*:*:*:*:*
Vendors & Products Tenda ac8 Firmware
Type Values Removed Values Added
First Time appeared Tenda
Tenda ac8
Vendors & Products Tenda
Tenda ac8
Type Values Removed Values Added
Weaknesses CWE-121
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jul 5, 2026, 1:16 AM
Reserved
Sep 26, 2025, 12:00 AM
Status
Modified
Published
Oct 30, 2025, 8:15 PM
Modified
Oct 27, 2026, 12:10 PM