CVE-2025-12265: Tenda CH22 VirtualSer fromVirtualSer buffer overflow
A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12265?
CVE-2025-12265 has a medium to high severity rating due to the potential for remote exploitation and the risk of buffer overflow.
How do I fix CVE-2025-12265?
To fix CVE-2025-12265, update the Tenda CH22 firmware to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2025-12265?
The potential impacts of CVE-2025-12265 include unauthorized access to the device and possible remote code execution.
Who is affected by CVE-2025-12265?
Users of the Tenda CH22 router running version 1.0.0.1 are affected by CVE-2025-12265.
Is CVE-2025-12265 being actively exploited?
Yes, there are reports indicating that CVE-2025-12265 is being actively exploited in the wild.