VYPR
Unrated severityNVD Advisory· Published Apr 4, 2025· Updated Apr 4, 2025

Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow

CVE-2025-3259

Description

A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Tenda/RX3llm-fuzzy2 versions
    = firmware 16.03.13.11+ 1 more
    • (no CPE)range: = firmware 16.03.13.11
    • (no CPE)range: 16.03.13.11

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.