Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-12212

Tenda O3 setNetworkService GetValue stack-based overflow

Description

A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda O3

  • 1.0.0.10(2478)affected

References