PT-2025-44040

CVE-2025-12322 pertains to a buffer overflow vulnerability found in Tenda CH22 1.0.0.1 routers. Specifically, the flaw exists within the fromNatStaticSetting function located in the /goform/NatStaticSetting endpoint. The vulnerability allows an attacker to manipulate the page argument through...

PT-2025-43932

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromVirtualSer function within the /goform/VirtualSer file. Manipulation of the page argument can lead to a buffer overflow. Remote exploitation is possible. The exploit has been...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page of the function fromNatStaticSetting in the file /goform/NatStaticSetting that fails to correctly validate the length of the input...

PT-2025-43943

A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

PT-2025-43892

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromDhcpListClient function within the /goform/DhcpListClient file. Manipulation of the page argument can lead to a buffer overflow. Remote exploitation is possible, and the exploit h...

PT-2025-43941

🚨 CVE-2025-12272 A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page of the function fromSetIpBind in the file /goform/SetIpBind that fails to correctly validate the length of the input data, and can be...

PT-2025-43940

🚨 CVE-2025-12271 A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. A buffer overflow vulnerability exists in Tenda CH22 version 1.0.0.1, which originates from the parameter page in the file /goform/RouteStatic that fails to correctly validate the length and size of the input data, and can be exploited by an...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the function fromDhcpListClient parameter page in the file /goform/DhcpListClient fails to correctly validate the length of the input data, which can be...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page in the file /goform/webExcptypemanFilter that fails to correctly validate the length of the input data, and can be exploited by an...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page of the function fromVirtualSer in the file /goform/VirtualSer that fails to correctly validate the length of the input data, and can ...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the parameter page in the file /goform/addressNat that fails to properly validate the length of the input data, which can be exploited by an attacker to execute...

PT-2025-43891

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSetIpBind function within the /goform/SetIpBind file. Manipulating the page argument can lead to a buffer overflow. Exploitation of this issue requires local network access. The...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. A buffer overflow vulnerability exists in the Tenda CH22 version 1.0.0.1, which originates from the failure of the fromSafeMacFilter function parameter page in the /goform/SafeMacFilter file to correctly validate the length of the input data, and...

Tenda CH22 安全漏洞

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page of the function fromSafeClientFilter in the file /goform/SafeClientFilter fails to correctly validate the length of the input data, a...

PT-2025-43890

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSafeMacFilter function within the /goform/SafeMacFilter file. Manipulation of the page argument can trigger a buffer overflow. This issue can be exploited remotely. The exploit fo...

PT-2025-43889

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSafeUrlFilter function within the /goform/SafeUrlFilter file. Manipulation of the page argument can lead to a buffer overflow, allowing for remote attacks. An exploit for this iss...

Tenda CH22 formSafeEmailFilter Function Memory Corruption Vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a memory corruption vulnerability that originates from the formSafeEmailFilter function parameter page in file /goform/SafeEmailFilter that fails to properly validate the length of the input data, which can ...

CVE-2025-11423

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and...