← Database

CVE-2025-13400

HIGH CVSS: 8.8 Published: 2025-11-19 Modified: 2026-06-17

Description

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Affected Platforms

Tenda Ch22Tenda Ch22 Firmware

Weakness Type

CWE-119, CWE-120, CWE-120

References