← Database

CVE-2025-12209

HIGH CVSS: 8.8 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability was determined in Tenda O3 1.0.0.10(2478). Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a manipulation of the argument dhcpEn can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Tenda O3 Firmware1.0.0.10\(2478\)Tenda O3

Weakness Type

CWE-119, CWE-121

References