CVE-2025-12210
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Risk Assessment
The vulnerability can be exploited remotely, and the publicly available exploit increases the risk of its use.
Recommendation
Update the Tenda O3 firmware to the latest version or apply measures to restrict access to the management interface.
Other vulnerabilities in Tenda O3
See all- CVE-2026-36784High
The Tenda O3 Wireless Router v1.0.0.5(4180) contains a stack overflow in the ip parameter of the fromNetToolGet function. An attacker can exploit this vulnerability by sending an HTTP request, leading to a Denial of Service (DoS).
- CVE-2026-36783High
Tenda O3 Wireless Router v1.0.0.5(4180) has a stack overflow in the domain parameter of the fromNetToolGet function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36779High
Tenda O3 Wireless Router v1.0.0.5(4180) has multiple stack overflows in the fromVirtualSer function via parameters puVar2, puVar1, __s2, __s1_00, and puVar3. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2026-36778Medium
Tenda O3 router firmware v1.0.0.5(4180) has a stack overflow in the username parameter of the R7WebsSecurityHandler function. This allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
- CVE-2025-12213High
A stack-based buffer overflow vulnerability was detected in Tenda O3 in the SetValue/GetValue function of /goform/setVlanConfig, caused by manipulation of the lan argument. The attack can be launched remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS