CVE-2025-12619: Tenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflow
A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapskcrypto24g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12619?
CVE-2025-12619 is classified as a critical severity vulnerability due to its potential for remote exploitation leading to buffer overflow.
How do I fix CVE-2025-12619?
The recommended fix for CVE-2025-12619 involves updating the Tenda A15 firmware to the latest version provided by Tenda.
Can CVE-2025-12619 be exploited remotely?
Yes, CVE-2025-12619 can be exploited remotely without physical access to the device.
What are the potential consequences of CVE-2025-12619?
Exploitation of CVE-2025-12619 can lead to unauthorized access, data leakage, or complete control over the affected Tenda A15 device.
Is my Tenda A15 vulnerable to CVE-2025-12619?
If you are using Tenda A15 firmware version 15.13.07.13 or earlier, your device is vulnerable to CVE-2025-12619.