CVE-2025-12272: Tenda CH22 addressNat fromAddressNat buffer overflow
A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12272?
CVE-2025-12272 is considered a high-severity vulnerability due to the potential for remote exploitation leading to buffer overflow.
How do I fix CVE-2025-12272?
To fix CVE-2025-12272, update the Tenda CH22 firmware to the latest version that addresses this buffer overflow vulnerability.
What are the potential impacts of CVE-2025-12272?
The potential impacts of CVE-2025-12272 include unauthorized access, data leakage, and remote code execution due to buffer overflow.
Who is affected by CVE-2025-12272?
Users of the Tenda CH22 version 1.0.0.1 are directly affected by CVE-2025-12272.
Is CVE-2025-12272 exploitable remotely?
Yes, CVE-2025-12272 can be exploited remotely, allowing attackers to initiate the exploit without physical access to the device.