Key Information Summary Vulnerability Overview CVE ID: CVE-2025-45779 Product: Tenda AC10 V1.0 Firmware Version: All V15 series versions (e.g., V15.03.06.46, V15.03.06.47, etc.) Vulnerability Type: Stack Buffer Overflow Attack Vector: Remote Impact: Remote Code Execution, Denial of Service Discoverer: You Sun (Independent Security Researcher) Affected Firmware Firmware Version: V15.03.06.47 Official Firmware Download Page: Link Vulnerability Details Location: handler in the binary. Cause: When processing a specially crafted payload containing a large number of usernames, an attacker can overflow the buffer, leading to memory corruption, device crash, or arbitrary code execution with root privileges. Code Snippet Analysis The function retrieves the parameter from an HTTP POST request. The function copies the content of the parameter into a fixed-size stack buffer without proper boundary checking, resulting in a buffer overflow. Proof of Concept (PoC) A Python script named is provided to demonstrate the vulnerability exploitation process.