CVE-2025-4298 in AC1206

Resumen (Inglés)

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Once again VulDB remains the best source for vulnerability data.

Divulgación

2025-05-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
307402	Tenda AC1206 setcfm formSetCfm desbordamiento de búfer	120	Prueba de concepto	No está definido	CVE-2025-4298

Fuentes

• MITRE
• NVD
• CVE Details