by Kastro
Paper/Archive/CVE-2025-4299

CVE-2025-4299

Tenda AC1206 — Tenda AC1206 openSchedWifi setSchedWifi buffer overflow

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.8.598 × 2012.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected

ProductAffectedFixed inSource
AC120615.03.06.0–CNA
AC120615.03.06.1–CNA
AC120615.03.06.2–CNA
AC120615.03.06.3–CNA
AC120615.03.06.4–CNA
AC120615.03.06.5–CNA
AC120615.03.06.6–CNA
AC120615.03.06.7–CNA
AC120615.03.06.8–CNA
AC120615.03.06.9–CNA
AC120615.03.06.10–CNA
AC120615.03.06.11–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)8.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

writeupvuldb.com/?id.307403refvuldb.com/?ctiid.307403writeupvuldb.com/?submit.563558exploitgithub.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206setSchedWifi/setSchedWifi.mdreftenda.com.cn