CVE-2025-12596
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A buffer overflow vulnerability has been detected in Tenda AC23 version 16.03.07.52 within the saveParentControlInfo function handling the /goform/saveParentControlInfo file. Manipulating the Time argument leads to a buffer overflow. The attack can be launched remotely and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can use the publicly available exploit to trigger a buffer overflow, potentially causing device crash or arbitrary code execution. Organizations using this router model are at risk of device compromise.
Recommendation
Update the Tenda AC23 firmware to the latest version if the vendor has released a fix, or restrict access to the management interface from external networks. Until a patch is available, consider disabling or isolating the vulnerable device.
Other vulnerabilities in Tenda AC23
See all- CVE-2026-1420High
A flaw has been found in Tenda AC23 16.03.07.52. It impacts an unknown function of the file /goform/WifiExtraSet. Manipulation of the argument wpapsk_crypto causes buffer overflow. Remote exploitation is possible, and the exploit has been published and may be used.
- CVE-2026-0640High
A vulnerability has been identified in Tenda AC23 firmware version 16.03.07.52, affecting the sscanf function in the /goform/PowerSaveSet file. Manipulation of the Time argument can lead to a buffer overflow. The attack can be launched remotely, and the exploit is publicly available.
- CVE-2023-40799Critical
Tenda AC23 version Vv16.03.07.45_cn is vulnerable to buffer overflow in the sub_450A4C function.
- CVE-2022-32386Critical
A buffer overflow vulnerability was discovered in the Tenda AC23 router firmware version v16.03.07.44 in the fromAdvSetMacMtuWan function. An attacker could exploit this flaw to execute arbitrary code or cause a denial of service.
- CVE-2022-32385Critical
A stack overflow vulnerability was discovered in the Tenda AC23 router running firmware version v16.03.07.44. This allows a remote attacker to execute arbitrary code on the device.
- CVE-2025-15216High
A vulnerability was identified in Tenda AC23 16.03.07.52. This impacts the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument bindnum leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
- CVE-2025-11356High
A buffer overflow vulnerability exists in Tenda AC23 up to version 16.03.07.52 in the sscanf function of /goform/SetStaticRouteCfg. Manipulation of the list argument allows remote attacks, and the exploit has been publicly disclosed.
- CVE-2023-40798High
In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability.
- CVE-2023-40797High
In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability.
- CVE-2023-40802Medium
The get_parentControl_list_Info function does not verify the parameters entered by the user, leading to a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn.
Original NVD description (English source)
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS