High · published November 17, 2025
⚡ A buffer overflow in Tenda CH22 could leave your device wide open for a remote attack! This vulnerability is like a delivery truck that doesn't check how heavy its load is — if too many packages (or data) are crammed inside, it could spill everywhere! An attacker could remotely exploit this flaw and inject malicious code, potentially leading to unauthorized access or control over the device. The stakes are high, as this could compromise your entire network, allowing attackers to manipulate or steal sensitive data!
This vulnerability is like a delivery truck that doesn't check how heavy its load is — if too many packages (or data) are crammed inside, it could spill everywhere! The CVE-2025-13288 vulnerability stems from improper handling of the 'delno' argument in the fromPptpUserSetting function, leading to a buffer overflow that attackers can exploit from afar.
An attacker could remotely exploit this flaw and inject malicious code, potentially leading to unauthorized access or control over the device. The stakes are high, as this could compromise your entire network, allowing attackers to manipulate or steal sensitive data! Update your Tenda CH22 router to version 1.0.0.2 to patch this vulnerability immediately. Additionally, review your network settings to ensure appropriate security measures are in place. You've got this! Fixing this vulnerability is just a few clicks away. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tenda/ch22_firmware | all versions | — |