Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:o3_firmware:1.0.0.12\(3880\):*:*:*:*:*:*:*

part: o version: 1.0.0.12(3880) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductO3 Firmware (9e90da4c-58cc-588b-a906-7c24274c8625)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7423 vulnerable 2026-06-08 07:43:18.551089 Tenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the function formWifiMacFilterSet of the file /goform/setWrlFilterList of the component httpd. The manipulation of the argument macList leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-11T01:02:08.323Z
Updated: 2025-07-11T13:32:32.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7422 vulnerable 2026-06-08 07:43:18.550529 Tenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The manipulation of the argument week leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-11T00:32:07.629Z
Updated: 2025-07-11T13:33:23.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7421 vulnerable 2026-06-08 07:43:18.549951 Tenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function fromMacFilterModify of the file /goform/operateMacFilter of the component httpd. The manipulation of the argument mac leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-11T00:02:06.586Z
Updated: 2025-07-11T13:35:03.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7420 vulnerable 2026-06-08 07:43:18.549411 Tenda O3V2 httpd setWrlBasicInfo formWifiBasicSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/setWrlBasicInfo of the component httpd. The manipulation of the argument extChannel leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-10T23:32:06.990Z
Updated: 2025-07-11T13:56:07.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7419 vulnerable 2026-06-08 07:43:18.548678 Tenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setRateTest of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-10T23:02:07.821Z
Updated: 2025-07-11T14:06:07.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7418 vulnerable 2026-06-08 07:43:18.548267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7417 vulnerable 2026-06-08 07:43:18.547752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7416 vulnerable 2026-06-08 07:43:18.547366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7415 vulnerable 2026-06-08 07:43:18.546840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7414 vulnerable 2026-06-08 07:43:18.545497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55613 vulnerable 2026-06-08 07:33:15.061027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36604 vulnerable 2026-06-08 06:39:45.539200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.