Tenda CH22 Buffer Overflow Vulnerability

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter chkHz in the file /goform/WrlExtraGet that fails to correctly validate the length of the input data, and can be exploited by an attacker t...

CVE-2025-13400

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

PT-2025-47491

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A buffer overflow issue exists in the formWrlExtraGet function of the /goform/WrlExtraGet file. Manipulation of the chkHz argument can trigger the overflow. Remote exploitation is possible, and an exploit...

Tenda CH22 security vulnerabilities

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter chkHz in the file /goform/WrlExtraGet that fails to correctly validate the length of the input data, and can be exploited by an attacker t...