CVE-2025-11549: falha de alta gravidade em Tenda W12
Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 8.9%
A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · W12CVEs relacionadas — Tenda W12
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3820HIGHTenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflowEPSS 12.7%CVE-2025-3693HIGHTenda W12 httpd cgiWifiRadioSet stack-based overflowEPSS 7.4%CVE-2025-3802HIGHTenda W12/i24 httpd cgiPingSet stack-based overflowEPSS 1.1%CVE-2025-4007HIGHTenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflowEPSS 1.0%CVE-2025-3803HIGHTenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflowEPSS 1.0%CVE-2025-11550HIGHTenda W12 HTTP Request modules wifiScheduledSet null pointer dereferenceEPSS 1.0%