CVE-2025-9443: Tenda CH22 editUserName formeditUserName buffer overflow
A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9443?
CVE-2025-9443 is considered a high severity vulnerability due to the potential for remote exploitation and buffer overflow.
How do I fix CVE-2025-9443?
To fix CVE-2025-9443, users should update the Tenda CH22 firmware to the latest version that contains the security patch.
What systems are affected by CVE-2025-9443?
CVE-2025-9443 specifically affects the Tenda CH22 router running version 1.0.0.1.
What type of vulnerability is CVE-2025-9443?
CVE-2025-9443 is a buffer overflow vulnerability that can be exploited through remote command injection.
Can CVE-2025-9443 be exploited remotely?
Yes, CVE-2025-9443 can be exploited remotely by manipulating the new_account argument in the editUserName function.