CVE-2025-12212: Tenda O3 setNetworkService GetValue stack-based overflow
A weakness has been identified in Tenda O3 1.0.0.10(2478). This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12212?
CVE-2025-12212 is classified as a high-severity vulnerability due to its potential for remote exploitation via buffer overflow.
How do I fix CVE-2025-12212?
To fix CVE-2025-12212, users should update the Tenda O3 firmware to the latest available version that addresses this vulnerability.
What systems are affected by CVE-2025-12212?
CVE-2025-12212 affects the Tenda O3 version 1.0.0.10(2478) specifically.
Can CVE-2025-12212 be exploited remotely?
Yes, CVE-2025-12212 can be exploited remotely, allowing attackers to initiate buffer overflow attacks from outside the network.
What type of vulnerability is CVE-2025-12212?
CVE-2025-12212 is a stack-based buffer overflow vulnerability impacting the SetValue/GetValue functions in Tenda O3.