CVE-2025-12211
Published: 27 October 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2025-12211 is a stack-based buffer overflow vulnerability in the Tenda O3 router running firmware version 1.0.0.10(2478). The flaw affects the SetValue and GetValue functions within the /goform/setDmzInfo endpoint, triggered by manipulating the dmzIP argument. Associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-121 (Stack-based Buffer Overflow), it has a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for remote exploitation.
Attackers with low privileges (PR:L), such as authenticated users on the network, can exploit this vulnerability remotely over the network with low complexity and no user interaction required. Successful exploitation of the buffer overflow could result in high impacts to confidentiality, integrity, and availability, potentially allowing arbitrary code execution, data compromise, or device takeover.
Advisories from VulDB (ctiid.329881, id.329881, submit.673265) document the issue and note that a public exploit is available on GitHub at noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setDmzInfo.md, increasing the risk of active attacks. The vendor's site at tenda.com.cn should be checked for firmware updates or patches, though no specific mitigation details are outlined in the provided references.
The exploit's public release heightens the urgency for Tenda O3 users to assess exposure and apply any available updates, as it may already be leveraged in targeted IoT attacks.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Stack-based buffer overflow in the public-facing web endpoint /goform/setDmzInfo allows remote code execution via unauthenticated exploitation of the router's application.