CVE-2025-12213

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.10(2478)

Description A security issue exists in Tenda O3 version 1.0.0.10(2478). The SetValue/GetValue function within the /goform/setVlanConfig file is susceptible to a stack-based buffer overflow. This occurs through manipulation of the lan argument. The attack can be initiated remotely. The exploit for this issue has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.