CVE-2025-3693 in W12

Résumé

par MITRE • 16/04/2025

A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: VulDB
• Divulgation: 16/04/2025
• Modérer: accepté
• Entrée: VDB-304982
• CPE: prêt
• CWE: CWE-121 (confirmé)
• Exploitation: Télécharger
• CVSS: 9.8 (NVD)
• EPSS: 0.06138
• KEV: non
• Activités: très faible
• Secteur: Homeoffice, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3693
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3693
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3693/