CVE-2025-3328: Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow
A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function formfastsettingwifiset of the file /goform/fastsettingwifiset. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3328?
CVE-2025-3328 has been classified as critical due to its potential for exploitation.
How do I fix CVE-2025-3328?
To fix CVE-2025-3328, update the firmware of the Tenda AC1206 to the latest version provided by the vendor.
What type of vulnerability is CVE-2025-3328?
CVE-2025-3328 is a buffer overflow vulnerability affecting the Wi-Fi settings function.
Which products are affected by CVE-2025-3328?
CVE-2025-3328 affects the Tenda AC1206 router with the firmware version 15.03.06.23.
Can CVE-2025-3328 be exploited remotely?
Yes, CVE-2025-3328 can be exploited remotely through manipulated arguments in the affected function.