CVE-2025-12234CWE-119CWE-120

CVE-2025-12234

High · published October 27, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

⚡ A remote exploit is as easy as altering a single argument! The Tenda CH22's SafeMacFilter function has a sneaky buffer overflow vulnerability, and it could allow attackers to gain unauthorized access. 🔥 Think of this vulnerability like a restaurant with a faulty reservation system. If a chef mistakenly accepts a reservation for more diners than they can handle, the kitchen might overload and start serving wrong dishes, creating chaos! If exploited, a bad actor could send commands that overwhelm the system, potentially leading to unauthorized access or even complete control over the device. This isn't just a malfunction; it could mean that sensitive information may be at risk, opening the door for all sorts of mischief!

Put simply

Think of this vulnerability like a restaurant with a faulty reservation system. If a chef mistakenly accepts a reservation for more diners than they can handle, the kitchen might overload and start serving wrong dishes, creating chaos! This vulnerability in Tenda CH22 1.0.0.1 occurs due to improper handling of user input in the SafeMacFilter function, leading to a buffer overflow. An attacker can manipulate the arguments to crash the system or execute arbitrary code remotely.

What to do

If exploited, a bad actor could send commands that overwhelm the system, potentially leading to unauthorized access or even complete control over the device. This isn't just a malfunction; it could mean that sensitive information may be at risk, opening the door for all sorts of mischief! Immediately patch the Tenda CH22 to the latest firmware version to close this vulnerability. Review your network configurations to ensure that only trusted devices are allowed to connect. Regularly audit your systems for outdated firmware and configurations. You’ve got this! With a quick update, your network will be more secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01071 · 64.6th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-10-27T11:15Z
Affected products (1)
ProductVersionsFixed in
tenda/ch22_firmwareall versions—
References (6)
EPSS history
Timeline
  • 27 OCT 06:22Z
    Tenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow
    cvelistv5