CVE-2025-7422: Tenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow
A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The manipulation of the argument week leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7422?
CVE-2025-7422 is classified as a critical vulnerability.
How does CVE-2025-7422 affect Tenda O3V2 devices?
CVE-2025-7422 affects Tenda O3V2 devices by enabling a stack-based buffer overflow through the setAutoReboot function.
What is required to exploit CVE-2025-7422?
Exploitation of CVE-2025-7422 requires sending a manipulated argument to the week parameter in the setNetworkService file.
How can I mitigate the risks of CVE-2025-7422?
Mitigating the risks of CVE-2025-7422 involves updating the Tenda O3V2 device to the latest firmware version.
What are the potential consequences of CVE-2025-7422?
The potential consequences of CVE-2025-7422 include unauthorized code execution and possible complete system compromise.