CVE-2025-4867

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as problematic. Affected by this vulnerability is the function formArpNerworkSet of the file /goform/ArpNerworkSet. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-404

• https://github.com/xubeining/Cve_report/blob/main/Notification%20of%20Denial%20of%20Service%20Vulnerability%20in%20Tenda%20A15%20Router%20(Version%20V15.13.07.13)%20by%20Shenzhen%20Jixiang%20Tenda%20Technology.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.309409Permissions Required, VDB Entry
• https://vuldb.com/?id.309409Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.575501Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

May 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-48650In multiple locations, there is a possible information discl…8.4
• CVE-2025-48651In importWrappedKey of KMKeymasterApplet.java, there is a po…5.5
• CVE-2025-48652In performPreInstallChecks of InstallRepository.kt, there is…7.8
• CVE-2025-48653In loadDataAndPostValue of multiple files, there is a possib…7.8
• CVE-2025-48654In onStart of CompanionDeviceManagerService.java, there is a…7.8
• CVE-2025-4866A vulnerability was found in weibocom rill-flow 0.1.18. It h…8.8
• CVE-2025-4868A vulnerability was found in merikbest ecommerce-spring-reac…6.3
• CVE-2025-4869A vulnerability classified as critical has been found in its…9.8
• CVE-2025-48695An issue was discovered in CyberDAVA before 1.1.20. A privil…6.4
• CVE-2025-48699Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2025-4870A vulnerability classified as critical was found in itsource…9.8
• CVE-2025-48700An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15…6.1