VYPR
Unrated severityNVD Advisory· Published Aug 15, 2025· Updated Aug 18, 2025

Tenda CH22 delFileName formdelFileName buffer overflow

CVE-2025-9006

Description

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Tenda/CH22llm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.0.0.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.