CVE-2025-3803

Summary

CVE-2025-3803 is a critical vulnerability affecting Tenda W12 and i24 routers running firmware versions 3.0.0.4(2887) and 3.0.0.5(3644). The issue lies in the cgiSysScheduleRebootSet function of the /bin/httpd file. This vulnerability results in a stack-based buffer overflow, which can be triggered by manipulating the argument rebootDate. The exploit can be executed remotely, meaning an attacker does not need physical access to the router to take advantage of this flaw. The vulnerability has been disclosed to the public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.