CVE-2025-12274

🗓️ 27 Oct 2025 12:32:12Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 11 Views🌐 WEB

Remote buffer overflow in Tenda CH22 1.0.0.1 via page argument in p2p list filter at goform path.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda CH22 router software allows a hacker to execute arbitrary code or cause service failures.	6 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-12274	27 Oct 202513:49	–	circl
CNNVD	Tenda CH22 安全漏洞	27 Oct 202500:00	–	cnnvd
CNVD	Tenda CH22 fromP2pListFilter function buffer overflow vulnerability	31 Oct 202500:00	–	cnvd
Cvelist	CVE-2025-12274 Tenda CH22 P2pListFilter fromP2pListFilter buffer overflow	27 Oct 202512:32	–	cvelist
EUVD	EUVD-2025-36167	27 Oct 202515:30	–	euvd
NVD	CVE-2025-12274	27 Oct 202513:15	–	nvd
OSV	CVE-2025-12274	27 Oct 202513:15	–	osv
Positive Technologies	PT-2025-43943	27 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12274	28 Oct 202512:51	–	redhatcve

NVD

Vulners

Node

tenda ch22_firmwareMatch1.0.0.1

AND

tenda ch22Match-

[
  {
    "vendor": "Tenda",
    "product": "CH22",
    "versions": [
      {
        "version": "1.0.0.1",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ch22_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/QIU-DIE/CVE/issues/23

Parameter	Position	Path	Description	CWE
page	query param	goform/P2pListFilter	Buffer overflow vulnerability in /goform/P2pListFilter triggered by manipulation of the page parameter, enabling remote exploitation	CWE-119, CWE-120

17 Jun 2026 08:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00646

SSVC