CVE-2025-12622: Tenda AC10 SysRunCmd formSysRunCmd buffer overflow
A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12622?
The severity of CVE-2025-12622 is high due to the potential for remote exploitation via buffer overflow.
How do I fix CVE-2025-12622?
To fix CVE-2025-12622, update your Tenda AC10 firmware to the latest version that addresses this vulnerability.
What is the impact of exploiting CVE-2025-12622?
Exploiting CVE-2025-12622 could allow an attacker to execute arbitrary commands on the affected device.
Who is affected by CVE-2025-12622?
Users of Tenda AC10 firmware version 16.03.10.13 are affected by CVE-2025-12622.
Can CVE-2025-12622 be exploited remotely?
Yes, CVE-2025-12622 can be exploited remotely, making it critical to apply necessary patches.