The vulnerability of the formNatlimit() function in the microprogramming router software Tenda CH22 allows a hacker to execute arbitrary code.

The vulnerability of the formNatlimit function in the Tenda CH22 router’s microprogramming software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...

CVE-2025-5685

CVE-2025-5685 affects Tenda CH22 1.0.0.1. The vulnerability is in the function formNatlimit of the file /goform/Natlimit ; manipulating the argument page leads to a stack-based buffer overflow. Remote exploitation is possible and public exploits exist. Public sources consistently describe the sam...

CVE-2025-5685: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-23975 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A critical vulnerability was found in Tenda CH22, affecting the formNatlimit function of the file /goform/Natlimit. The manipulation of the page argument leads to a stack-based buffer overflow. It is...