CVE-2025-3693 in W12

Tóm tắt

Bởi MITRE • 16/04/2025

A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• chịu trách nhiệm: VulDB
• Tiết lộ: 16/04/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-304982
• CPE: sẵn sàng
• CWE: CWE-121 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 9.8 (NVD)
• EPSS: 0.06138
• KEV: không
• Các hoạt động: rất thấp
• ngành: Energy, Hospital, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-3693
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-3693
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-3693/