CVE-2025-3328

Summary

CVE-2025-3328 is a critical vulnerability affecting the Tenda AC1206 model with firmware version 15.03.06.23. The issue lies within the function form_fast_setting_wifi_set of the /goform/fast_setting_wifi_set file, which can be exploited through manipulation of the ssid/timeZone argument. This vulnerability results in a buffer overflow, potentially allowing remote attacks. The exploit for this vulnerability has been disclosed to the public, increasing the risk for potential unauthorized access and system compromise. It is essential to update the affected devices as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.