Tenda W12 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tenda W12 Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:tenda:w12_firmware

CVE-2025-11550 Medium · 6.5 CWE-476 Oct 9, 2025

Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2025-11549 Critical · 9.8 CWE-119 Oct 9, 2025

Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow

A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.