CVE-2025-12322

🗓️ 27 Oct 2025 20:32:09Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 17 Views🌐 WEB

CVE-2025-12322 for Tenda CH22 1.0.0.1 allows remote buffer overflow via fromNatStaticSetting.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the fromNatStaticSetting() function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system allows a hacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.	28 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-12322	27 Oct 202521:13	–	circl
CNNVD	Tenda CH22 安全漏洞	27 Oct 202500:00	–	cnnvd
CNVD	Tenda CH22 fromNatStaticSetting function buffer overflow vulnerability	31 Oct 202500:00	–	cnvd
Cvelist	CVE-2025-12322 Tenda CH22 NatStaticSetting fromNatStaticSetting buffer overflow	27 Oct 202520:32	–	cvelist
EUVD	EUVD-2025-36337	27 Oct 202520:32	–	euvd
NVD	CVE-2025-12322	27 Oct 202521:15	–	nvd
OSV	CVE-2025-12322	27 Oct 202521:15	–	osv
Positive Technologies	PT-2025-44040	27 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12322	28 Oct 202521:01	–	redhatcve

NVD

Vulners

Node

AND

tenda ch22_firmwareMatch1.0.0.1

tenda ch22Match-

[
  {
    "vendor": "Tenda",
    "product": "CH22",
    "versions": [
      {
        "version": "1.0.0.1",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:ch22_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
github	www.github.com/QIU-DIE/CVE/issues/19
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
page	query param	goform/NatStaticSetting	Buffer overflow vulnerability in NatStaticSetting via manipulation of the page parameter, enabling remote exploit.	CWE-120, CWE-119

17 Jun 2026 08:32Current

8.5High risk

Vulners AI Score8.5

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00745

SSVC