CVE-2025-55613

Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter

Critical · published August 22, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

🚨 Buffer overflow alert! The Tenda O3V2 model has a vulnerability in the fromSafeSetMacFilter function, and it’s a doozy! ⚡ Think of it like a restaurant overflowing with orders — the kitchen can’t handle the influx and starts mixing up everything, leading to chaos. Here, too much data in the mac parameter can cause the system to crash or misbehave, letting attackers sneak in unexpectedly! An attacker can exploit this vulnerability to overwrite critical memory locations, possibly leading to remote code execution. This means they could take control of the device, manipulate settings, or launch further attacks on your network, absolutely devastating your security!

Put simply

Think of it like a restaurant overflowing with orders — the kitchen can’t handle the influx and starts mixing up everything, leading to chaos. Here, too much data in the mac parameter can cause the system to crash or misbehave, letting attackers sneak in unexpectedly! This buffer overflow vulnerability occurs in the fromSafeSetMacFilter function due to improper handling of the mac parameter, allowing attackers to send excessive data that can overwrite adjacent memory spaces.

What to do

An attacker can exploit this vulnerability to overwrite critical memory locations, possibly leading to remote code execution. This means they could take control of the device, manipulate settings, or launch further attacks on your network, absolutely devastating your security! To mitigate this, patch your Tenda O3V2 to the latest firmware version immediately. Ensure that you’re using version 1.0.0.12(3880) or later, and consider implementing additional input validation checks to prevent this kind of overflow in the future. You’ve got this! Follow these steps, and you’ll bolster your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Published
2025-08-22T00:00Z
EPSS history
Timeline
  • 22 AUG 00:00Z
    Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter
    cvelistv5