CVE-2025-12232: Tenda CH22 SafeClientFilter fromSafeClientFilter buffer overflow
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12232?
CVE-2025-12232 has been identified as a critical vulnerability due to the potential for remote code execution.
How does CVE-2025-12232 affect the Tenda CH22 device?
CVE-2025-12232 affects the Tenda CH22 by allowing an attacker to exploit a buffer overflow in the fromSafeClientFilter function.
Can CVE-2025-12232 be exploited remotely?
Yes, CVE-2025-12232 can be exploited remotely, making it highly dangerous for devices connected to the internet.
How do I mitigate the risks associated with CVE-2025-12232?
To mitigate the risks associated with CVE-2025-12232, it is recommended to apply any available firmware updates from Tenda immediately.
What should I do if I suspect my Tenda CH22 is affected by CVE-2025-12232?
If you suspect your Tenda CH22 is affected by CVE-2025-12232, disconnect it from the internet and check for firmware updates or vendor advisories.