CVE-2025-57078: Tenda g3 Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected products

• Tenda g3 Firmware: up to and including 15.11.0.17

Published 2025-09-09. Last modified 2026-06-17.