CVE-2025-3328: Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow
First published: Mon Apr 07 2025(Updated: )
A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tenda AC1206 firmware | ||
| All of | ||
| Tenda AC1206 Firmware | =15.03.06.23 | |
| Tenda AC1206 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.303540
- https://vuldb.com/?ctiid.303540
- https://vuldb.com/?submit.551893
- https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set_time/time.md
- https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set/form_fast_setting_wifi_set.md
- https://www.tenda.com.cn/
Frequently Asked Questions
What is the severity of CVE-2025-3328?
CVE-2025-3328 has been classified as critical due to its potential for exploitation.
How do I fix CVE-2025-3328?
To fix CVE-2025-3328, update the firmware of the Tenda AC1206 to the latest version provided by the vendor.
What type of vulnerability is CVE-2025-3328?
CVE-2025-3328 is a buffer overflow vulnerability affecting the Wi-Fi settings function.
Which products are affected by CVE-2025-3328?
CVE-2025-3328 affects the Tenda AC1206 router with the firmware version 15.03.06.23.
Can CVE-2025-3328 be exploited remotely?
Yes, CVE-2025-3328 can be exploited remotely through manipulated arguments in the affected function.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/type
- agent/first-publish-date
- agent/title
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/author
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/tags
- agent/last-modified-date
- agent/weakness
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/tenda
- canonical/tenda ac1206 firmware
- version/tenda ac1206 firmware/15.03.06.23