Vulnerability Description
A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac23 Firmware | 16.03.07.52 |
| Tenda | Ac23 | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/LX-LX88/cve/issues/8ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.330890Permissions RequiredVDB Entry
- https://vuldb.com/?id.330890Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.677581Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://github.com/LX-LX88/cve/issues/8ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-12595?
CVE-2025-12595 is a vulnerability with a CVSS score of 8.8 (HIGH). A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer over...
How severe is CVE-2025-12595?
CVE-2025-12595 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12595?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac23 Firmware, Tenda Ac23.