← Database

CVE-2025-12596

HIGH CVSS: 8.8 Published: 2025-11-02 Modified: 2026-06-17

Description

A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected Platforms

Tenda Ac23 FirmwareTenda Ac23

Weakness Type

CWE-119, CWE-120, CWE-120

References