CVE-2025-12274: Tenda CH22 P2pListFilter fromP2pListFilter buffer overflow
A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12274?
CVE-2025-12274 is categorized as a critical vulnerability due to the potential for remote exploitation leading to buffer overflow.
How do I fix CVE-2025-12274?
To fix CVE-2025-12274, update the Tenda CH22 firmware to the latest version provided by the manufacturer.
What impacts does CVE-2025-12274 have on Tenda CH22?
CVE-2025-12274 can allow attackers to remotely exploit the buffer overflow, potentially leading to unauthorized access or control of the device.
Is my device affected by CVE-2025-12274?
Any Tenda CH22 running version 1.0.0.1 is affected by CVE-2025-12274, so check your device's firmware version.
How can I mitigate risks associated with CVE-2025-12274?
To mitigate risks associated with CVE-2025-12274, ensure your Tenda CH22 device is updated regularly and disable remote management features if not needed.