| Title | Tenda W12 V3.0.0.6(3948) NULL Pointer Dereference |
|---|
| Description | A null pointer dereference vulnerability exists in Tenda W12 firmware V3.0.0.6(3948) within the cgiWifiScheduledSet function. Remote attackers can exploit this flaw by sending malformed HTTP requests to cause a denial of service condition.
|
|---|
| Source | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/Tenda_W12/cgiWifiScheduledSet/cgiWifiScheduledSet.md |
|---|
| User | z472421519 (UID 91218) |
|---|
| Submission | 10/06/2025 22:24 (8 months ago) |
|---|
| Moderation | 10/09/2025 13:14 (3 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 327709 [Tenda W12 3.0.0.6(3948) HTTP Request /goform/modules wifiScheduledSet null pointer dereference] |
|---|
| Points | 16 |
|---|