CVE-2025-7417

🗓️ 10 Jul 2025 22:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 14 Views🌐 WEB

Critical vulnerability in Tenda O3V2 allows remote stack-based overflow via setPingInfo function

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-7417	28 Jan 202621:03	–	circl
CNNVD	Tenda O3V2 安全漏洞	10 Jul 202500:00	–	cnnvd
CNVD	Tenda O3V2 /goform/setPingInfo file buffer overflow vulnerability	18 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-7417 Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow	10 Jul 202522:02	–	cvelist
EUVD	EUVD-2025-21073	3 Oct 202520:07	–	euvd
NVD	CVE-2025-7417	10 Jul 202522:15	–	nvd
Positive Technologies	PT-2025-29172	4 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-7417	12 Jul 202522:14	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-7417	20 Jan 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2025-7417 Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow	10 Jul 202522:02	–	vulnrichment

NVD

Node

tenda o3_firmwareMatch1.0.0.12(3880)

AND

tenda o3Match2.0

[
  {
    "vendor": "Tenda",
    "product": "O3V2",
    "versions": [
      {
        "version": "1.0.0.12(3880)",
        "status": "affected"
      }
    ],
    "modules": [
      "httpd"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_50/50.md
github	www.github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_50/50.md
tenda	www.tenda.com.cn/

Parameter	Position	Path	Description	CWE
ip	query param	/goform/setPingInfo	Stack-based buffer overflow via manipulation of ip in /goform/setPingInfo (fromNetToolGet) on Tenda O3V2; remote exploit possible.	CWE-119, CWE-121

16 Jul 2025 16:41Current

7.3High risk

Vulners AI Score7.3

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.01566

SSVC

tenda o3v2 vulnerability critical security flaw remote attack stack-based buffer overflow