CVE-2025-4897: Tenda a15 Firmware

High severity, CVSS 7.5. EPSS: 6.1% chance of exploitation in the next 30 days.

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Tenda a15 Firmware: version 15.13.07.09 only; version 15.13.07.13 only

Published 2025-05-18. Last modified 2026-06-17.