CVE-2025-12271: Tenda CH22 RouteStatic fromRouteStatic buffer overflow
A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12271?
CVE-2025-12271 has a high severity due to its remote exploitability and potential for causing buffer overflow.
How do I fix CVE-2025-12271?
To fix CVE-2025-12271, users should upgrade their Tenda CH22 firmware to the latest version provided by the manufacturer.
What type of vulnerability is CVE-2025-12271?
CVE-2025-12271 is a buffer overflow vulnerability caused by improper handling of input in the function fromRouteStatic.
Who is affected by CVE-2025-12271?
CVE-2025-12271 affects users of the Tenda CH22 router running version 1.0.0.1.
Is it possible to exploit CVE-2025-12271 remotely?
Yes, CVE-2025-12271 can be exploited remotely, making it particularly dangerous.