CVE-2025-7418: Tenda O3V2 httpd setPing fromPingResultGet stack-based overflow
A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the function fromPingResultGet of the file /goform/setPing of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7418?
CVE-2025-7418 is classified as a critical vulnerability.
How do I fix CVE-2025-7418?
To fix CVE-2025-7418, it is recommended to update Tenda O3V2 to the latest version that addresses this vulnerability.
What is the nature of the vulnerability in CVE-2025-7418?
CVE-2025-7418 involves a stack-based buffer overflow caused by the manipulation of the argument destIP in the function fromPingResultGet.
Which component is affected by CVE-2025-7418?
CVE-2025-7418 affects the httpd component in Tenda O3V2.
Can CVE-2025-7418 lead to remote code execution?
Yes, CVE-2025-7418 can potentially allow an attacker to execute arbitrary code remotely due to the buffer overflow.