CVE-2025-9748: falha de alta gravidade em Tenda CH22
Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.9%
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
Produtos afetados
Tenda · CH22CVEs relacionadas — Tenda CH22
No mesmo produto, das mais perigosas para as menos.
CVE-2025-8180HIGHTenda CH22 deleteUserName formdeleteUserName buffer overflowEPSS 12.3%CVE-2025-11418CRITICALTenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflowEPSS 6.9%CVE-2025-12235HIGHTenda CH22 SetIpBind fromSetIpBind buffer overflowEPSS 5.2%CVE-2025-12232HIGHTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflowEPSS 4.9%CVE-2025-12233HIGHTenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflowEPSS 4.7%CVE-2025-15229MEDIUMTenda CH22 DhcpListClient fromDhcpListClient denial of serviceEPSS 4.6%