CVE-2025-11549: Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow
A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11549?
The severity of CVE-2025-11549 is considered high due to the potential for a stack-based buffer overflow.
How do I fix CVE-2025-11549?
To fix CVE-2025-11549, users should update the Tenda W12 firmware to the latest version provided by Tenda.
What is affected by CVE-2025-11549?
CVE-2025-11549 affects the Tenda W12 device, specifically the function wifiMacFilterSet in the HTTP Request Handler.
What type of attack is associated with CVE-2025-11549?
CVE-2025-11549 is associated with a stack-based buffer overflow attack that can be triggered by manipulating the MAC address argument.
Can CVE-2025-11549 be exploited remotely?
Yes, CVE-2025-11549 can be exploited remotely by an attacker sending crafted HTTP requests to the vulnerable device.