Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-12209

Tenda O3 setDhcpConfig GetValue stack-based overflow

Description

A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a manipulation of the argument dhcpEn can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda O3

  • 1.0.0.10(2478)affected

References