PT-2025-43874

CVE-2025-12214

Published

2025-10-11

Updated

2025-10-28

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.10(2478)

Description A stack-based buffer overflow exists in the SetValue/GetValue function within the /goform/sysAutoReboot file of Tenda O3. Manipulation of the enable argument can trigger this issue, allowing for remote code execution. The exploit for this issue is publicly available.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the /goform/sysAutoReboot function until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Yhryhryhr_Tutu

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121: Stack-based Buffer Overflow

Related identifiers