CVE-2025-25662

Published: Feb 20, 2025Modified: May 7, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time.

Affected (1)

Products: Tenda: O4 Firmware

Tenda

1 product

O4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tenda O4 Firmware	Version 1.0.0.10(2936)

Running on/with	Platform Versions
Tenda O4	Version 3.0

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://github.com/jangfan/my-vuln/blob/main/Tenda/O4V3/setMacFilterList.md

Source: cve@mitre.org

Broken Link

Timeline

No history available yet.