A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
References
| Link | Resource |
|---|---|
| https://pan.baidu.com/s/1Jl1zy5niigg1XYm8ZCh_Lg | Not Applicable |
| https://vuldb.com/?ctiid.330914 | Permissions Required VDB Entry |
| https://vuldb.com/?id.330914 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.678889 | Third Party Advisory VDB Entry |
| https://www.tenda.com.cn/ | Product |
| https://www.yuque.com/ba1ma0-an29k/nnxoap/rg8eug0zk8ep3zne?singleDoc | Permissions Required |
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Nov 2025, 14:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://pan.baidu.com/s/1Jl1zy5niigg1XYm8ZCh_Lg - Not Applicable | |
| References | () https://vuldb.com/?ctiid.330914 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.330914 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.678889 - Third Party Advisory, VDB Entry | |
| References | () https://www.tenda.com.cn/ - Product | |
| References | () https://www.yuque.com/ba1ma0-an29k/nnxoap/rg8eug0zk8ep3zne?singleDoc - Permissions Required | |
| CPE | cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:* cpe:2.3:o:tenda:ac10_firmware:16.03.10.13:*:*:*:*:*:*:* |
|
| First Time |
Tenda
Tenda ac10 Tenda ac10 Firmware |
03 Nov 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-03 08:15
Updated : 2025-11-05 14:34
NVD link : CVE-2025-12622
Mitre link : CVE-2025-12622
CVE.ORG link : CVE-2025-12622
JSON object : View
Products Affected
tenda
- ac10
- ac10_firmware