CVE-2025-13400: Tenda CH22 WrlExtraGet formWrlExtraGet buffer overflow
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13400?
CVE-2025-13400 is classified as a critical severity vulnerability due to potential remote exploitation.
How do I fix CVE-2025-13400?
To fix CVE-2025-13400, update the Tenda CH22 firmware to the latest version as recommended by the vendor.
What is the impact of CVE-2025-13400 on Tenda CH22 devices?
CVE-2025-13400 could allow an attacker to execute arbitrary code remotely through a buffer overflow.
Is CVE-2025-13400 being actively exploited?
Yes, CVE-2025-13400 is publicly known and has been reported to be actively exploited.
What specific function is affected by CVE-2025-13400?
CVE-2025-13400 affects the function formWrlExtraGet in the /goform/WrlExtraGet file.