CVE-2025-3802

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 119
CWE ID 121

Summary

CVE-2025-3802 is a critical buffer overflow vulnerability affecting the Tenda W12 and i24 routers running versions 3.0.0.4(2887) and 3.0.0.5(3644). The issue lies within the cgiPingSet function of the /bin/httpd file, which can be exploited by manipulating the pingIP argument. The exploit, which involves stack-based buffer overflow, can be initiated remotely. This vulnerability has been publicly disclosed, increasing the risk of potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Tenda i24
  • W12

Affected Vendors

  • Shenzhen Tenda Technology Co. Ltd

Advisories, Assessments, and Mitigations