CVE-2025-4298: Tenda AC1206 setcfm formSetCfm buffer overflow
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4298?
CVE-2025-4298 is classified as critical due to its potential to exploit a buffer overflow vulnerability.
How do I fix CVE-2025-4298?
To mitigate CVE-2025-4298, upgrade your Tenda AC1206 firmware to a version beyond 15.03.06.23.
What does CVE-2025-4298 affect?
CVE-2025-4298 affects the Tenda AC1206 router firmware version up to 15.03.06.23.
Can CVE-2025-4298 be exploited remotely?
Yes, CVE-2025-4298 can be exploited remotely, making it a significant security risk.
What is the impact of CVE-2025-4298?
The impact of CVE-2025-4298 includes potential unauthorized access and control over the affected device due to buffer overflow.