VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 19, 2025· Updated Apr 21, 2025

Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflow

CVE-2025-3820

Description

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

4
  • Tenda/i24llm-fuzzy
    Range: 3.0.0.4(2887)/3.0.0.5(3644)
  • Tenda/W12llm-fuzzy
    Range: 3.0.0.4(2887)/3.0.0.5(3644)
  • Tenda/i24v5
    Range: 3.0.0.4(2887)
  • Tenda/W12v5
    Range: 3.0.0.4(2887)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.