Vulnerability details
CVE-2025-3328
Tenda AC1206
Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow
CVSS 4.0
8.7High
Official description
A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 8.8High | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 9.0High | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Tenda | AC1206 | 15.03.06.23 | CVEProject cvelistV5 (CNA) |
References and advisories
6- https://vuldb.com/?id.303540 vdb-entrytechnical-description
- https://vuldb.com/?ctiid.303540 signaturepermissions-required
- https://vuldb.com/?submit.551893 third-party-advisory
- https://www.tenda.com.cn/ product
- https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set/form_fast_setting_wifi_set.md exploit
- https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set_time/time.md related
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-04-07
- Last updated
- 2025-04-07
- State
- Published
- Assigner (CNA)
- VulDB
Exploit prediction (EPSS)
7.63%
Probability of exploitation in 30 days
94.5%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-120Buffer Overflow
- CWE-119Memory Corruption