Tenda getMasterPassengerAnalyseData time Parameter Buffer Overflow Attempt (CVE-2025-9299)

Tim Peck@timpeck

•updated Nov 10, 2025•0•16

This rule detects an attempt to exploit a buffer overflow vulnerability (CVE-2025-9299) in Tenda routers. The exploit targets the `/goform/getMasterPassengerAnalyseData` endpoint via an HTTP POST request, specifically looking for an overly long 'time' parameter in the request body, which could lead to a buffer overflow.