CVE-2025-29215
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 20, 2025
Updated: Mar 25, 2025
CWE ID 121
Summary
CVE-2025-29215 is a stack overflow vulnerability affecting Tenda AX12 v22.03.01.46_CN. This issue was discovered in the sub_43fdcc function located within the /goform/SetNetControlList path. A successful exploit could lead to the attacker injecting and executing arbitrary code, potentially taking control of the affected device or gaining unauthorized access to the network. Users are strongly advised to update their Tenda AX12 firmware to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.