Cyber Posture

CVE-2025-1895

MediumPublic PoC

Published: 04 March 2025

Published
04 March 2025
Modified
05 March 2025
KEV Added
—
Patch
—
CVSS Score 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0007 21.0th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

Security Summary

CVE-2025-1895 is a buffer overflow vulnerability (CWE-119, CWE-120) in Tenda TX3 firmware version 16.03.13.11_multi. The flaw affects an unknown part of the /goform/setMacFilterCfg file, where manipulation of the deviceList argument triggers the overflow. Published on 2025-03-04, it carries a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

An attacker with low privileges can exploit this vulnerability remotely over the network with low complexity and no user interaction required. Successful exploitation results in high availability impact, such as device crashes or denial of service, without compromising confidentiality or integrity.

VulDB advisories (ctiid.298413, id.298413, submit.506601) document the issue, and a proof-of-concept exploit is publicly disclosed in a GitHub repository (tenda_tx3_bof_1.pdf). The Tenda vendor website provides relevant resources for further details on patches or mitigations.

Details

CWE(s)
CWE-119CWE-120

Affected Products

tenda
tx3 firmware
16.03.13.11

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

Buffer overflow in public web form (/goform/setMacFilterCfg) enables remote exploitation of internet-facing router firmware for DoS via crash (T1190 for public-facing app exploitation; T1499.004 for application/system exploitation causing availability impact).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References