Vulnerabilidades do Tenda CH22

CVE-2025-12236 Alta · 8.8 CWE-120 27/10/2025

Tenda CH22 DhcpListClient fromDhcpListClient buffer overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVE-2025-12235 Alta · 8.0 CWE-120 27/10/2025

Tenda CH22 SetIpBind fromSetIpBind buffer overflow

A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.

CVE-2025-12234 Alta · 8.8 CWE-120 27/10/2025

Tenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-12233 Alta · 8.8 CWE-120 27/10/2025

Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

CVE-2025-12232 Crítica · 9.8 CWE-119 27/10/2025

Tenda CH22 SafeClientFilter fromSafeClientFilter buffer overflow

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

CVE-2025-11423 Crítica · 9.8 CWE-119 07/10/2025

Corrupção de memória em formSafeEmailFilter do Tenda CH22

Foi identificada uma vulnerabilidade no Tenda CH22 1.0.0.1. Ela afeta a função formSafeEmailFilter do arquivo /goform/SafeEmailFilter. A manipulação do argumento page resulta em corrupção de memória. O ataque pode ser realizado remotamente. O exploit foi tornado público e pode ser utilizado.

CVE-2025-11418 Crítica · 9.8 CWE-119 07/10/2025

Estouro de buffer baseado em pilha no Tenda CH22 no HTTP Request Handler (formWrlsafeset)

Foi detectada uma vulnerabilidade de segurança no Tenda CH22 até a versão 1.0.0.1. Ela afeta a função formWrlsafeset do arquivo /goform/AdvSetWrlsafeset do componente HTTP Request Handler. A manipulação do argumento mit_ssid_index leva a um estouro de buffer baseado em pilha. O ataque pode ser iniciado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.

CVE-2025-11117 Alta · 8.8 CWE-119 28/09/2025

Tenda CH22 GstDhcpSetSer formWrlExtraGet buffer overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-9748 Crítica · 9.8 CWE-787 31/08/2025

Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflow

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.