CVE-2025-12210: Tenda O3 AdvSetLanip GetValue stack-based overflow
A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12210?
CVE-2025-12210 is considered a critical vulnerability due to its potential for remote exploitation and stack-based buffer overflow.
How do I fix CVE-2025-12210?
To fix CVE-2025-12210, update your Tenda O3 device to the latest firmware version that addresses the vulnerability.
What type of attack can exploit CVE-2025-12210?
CVE-2025-12210 can be exploited through remote attacks that leverage stack-based buffer overflow via manipulation of the lanIp argument.
Which devices are affected by CVE-2025-12210?
CVE-2025-12210 affects Tenda O3 devices running version 1.0.0.10(2478) or earlier.
Is it possible to exploit CVE-2025-12210 without authentication?
Yes, CVE-2025-12210 can be exploited remotely without authentication, making it particularly dangerous.