CVE-2025-5619

🗓️ 04 Jun 2025 23:00:24Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 69 Views🌐 WEB

Critical vulnerability in Tenda CH22 allows remote stack-based buffer overflow via addUserName form.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-5619	5 Jun 202500:07	–	circl
CNNVD	Tenda CH22 安全漏洞	4 Jun 202500:00	–	cnnvd
CNVD	Tenda CH22 Stack Buffer Overflow Vulnerability	6 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-5619 Tenda CH22 addUserName formaddUserName stack-based overflow	4 Jun 202523:00	–	cvelist
EUVD	EUVD-2025-16934	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5619	4 Jun 202523:15	–	nvd
OSV	CVE-2025-5619	4 Jun 202523:15	–	osv
Positive Technologies	PT-2025-23871 · Tenda · Tenda Ch22	4 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5619	6 Jun 202523:16	–	redhatcve
Vulnrichment	CVE-2025-5619 Tenda CH22 addUserName formaddUserName stack-based overflow	4 Jun 202523:00	–	vulnrichment

NVD

Vulners

Node

tenda ch22_firmwareMatch1.0.0.1

AND

tenda ch22Match-

[
  {
    "vendor": "Tenda",
    "product": "CH22",
    "versions": [
      {
        "version": "1.0.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/xubeining/Cve_report/blob/main/A%20remote%20code%20execution%20vulnerability%20in%20the%20router%20CH22%20V1.0.0.1%20manufactured%20by%20Shenzhen%20Jixiangtengda%20Technology%20Co.%2C%20Ltd.md
vuldb	www.vuldb.com/
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Password	request body	goform/addUserName	Stack-based buffer overflow via Password argument in /goform/addUserName function (formaddUserName).	CWE-119, CWE-787, CWE-121

17 Jun 2026 09:48Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8 - 9.8

CVSS 48.7

CVSS 29

CVSS 38.8

EPSS0.01022

SSVC

tenda ch22 stack-based overflow remote attack critical vulnerability public exploit.