Tenda CH22 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Tenda CH22: 34 record(s), with affected versions and fixes.
CVE-2025-12236
High · 8.8
CWE-120 Oct 27, 2025
Tenda CH22 DhcpListClient fromDhcpListClient buffer overflow
A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2025-12235
High · 8.0
CWE-120 Oct 27, 2025
Tenda CH22 SetIpBind fromSetIpBind buffer overflow
A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.
CVE-2025-12234
High · 8.8
CWE-120 Oct 27, 2025
Tenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-12233
High · 8.8
CWE-120 Oct 27, 2025
Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2025-12232
Critical · 9.8
CWE-119 Oct 27, 2025
Tenda CH22 SafeClientFilter fromSafeClientFilter buffer overflow
A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2025-11423
Critical · 9.8
CWE-119 Oct 7, 2025
Tenda CH22 SafeEmailFilter formSafeEmailFilter memory corruption
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVE-2025-11418
Critical · 9.8
CWE-119 Oct 7, 2025
Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11117
High · 8.8
CWE-119 Sep 28, 2025
Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-9748
Critical · 9.8
CWE-787 Aug 31, 2025
Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflow
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.