← Database

CVE-2025-12235

HIGH CVSS: 8.0 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.

Affected Platforms

Tenda Ch22Tenda Ch22 Firmware

Weakness Type

CWE-119, CWE-120, CWE-120

References