CVE-2025-25678

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function

Critical · published February 20, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

🚨 A simple oversight could unlock a treasure chest of chaos! A buffer overflow in Tenda i12's funcpara1 parameter is a game-changer. 🔥 Think of a busy restaurant kitchen where a chef accidentally overfills a pot, causing it to spill everywhere! This overflow could let an attacker slide right in, messing with ingredients and recipes without anyone noticing. 🍽️ If exploited, this vulnerability could allow an attacker to execute arbitrary code, gaining complete control of the device. Imagine someone slipping in and switching up your orders or even shutting the whole kitchen down—absolutely devastating!

Put simply

Think of a busy restaurant kitchen where a chef accidentally overfills a pot, causing it to spill everywhere! This overflow could let an attacker slide right in, messing with ingredients and recipes without anyone noticing. 🍽️ This buffer overflow occurs through the funcpara1 parameter in the formSetCfm function, allowing attackers to overflow the buffer and execute malicious code. If they craft their input just right, they can hijack the device completely!

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code, gaining complete control of the device. Imagine someone slipping in and switching up your orders or even shutting the whole kitchen down—absolutely devastating! Patch Tenda i12 to version 1.0.0.11 immediately to close this dangerous vulnerability. It's crucial to audit any input to this function to prevent buffer overflows in the future. Don't wait—secure your kitchen! You've got this! Implement these steps, and you'll have your Tenda i12 locked down in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Published
2025-02-20T00:00Z
EPSS history
Timeline
  • 20 FEB 00:00Z
    Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function
    cvelistv5