Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-4298

Tenda AC1206 setcfm formSetCfm buffer overflow

Description

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda AC1206

  • 15.03.06.0affected
  • 15.03.06.1affected
  • 15.03.06.2affected
  • 15.03.06.3affected
  • 15.03.06.4affected
  • 15.03.06.5affected
  • 15.03.06.6affected
  • 15.03.06.7affected
  • 15.03.06.8affected
  • 15.03.06.9affected
  • 15.03.06.10affected
  • 15.03.06.11affected
  • 15.03.06.12affected
  • 15.03.06.13affected
  • 15.03.06.14affected
  • 15.03.06.15affected
  • 15.03.06.16affected
  • 15.03.06.17affected
  • 15.03.06.18affected
  • 15.03.06.19affected
  • 15.03.06.20affected
  • 15.03.06.21affected
  • 15.03.06.22affected
  • 15.03.06.23affected

References