CNNVD-202510-3644 Information

CNNVD ID

CNNVD-202510-3644

CVE-2025-12212

  • CNNVD Published: 2025-10-27

Description (Chinese)

Tenda O3是中国腾达(Tenda)公司的一个室外无线网桥。 Tenda O3 1.0.0.10版本存在安全漏洞,该漏洞源于文件/goform/setNetworkService中函数SetValue/GetValue对参数upnpEn的错误操作,可能导致栈缓冲区溢出。

Description (English)

Tenda O3 is an outdoor wireless bridge at Tenda, China. There is a security loophole in version Tenda O3.0.0.10 that stems from the error of the SetValue/GetValue against the parameteruppen of the central function of file/goform/setNetworkService, which may result in the spilling of the fence.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2025-10-27

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.329882 https://vuldb.com/?id.329882 https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setNetworkService.md https://vuldb.com/?submit.673267 https://www.tenda.com.cn/

Share on: