Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:w12:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W12 (b2012ae8-d826-550c-98a0-755b36b8309f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9778 |
not_vulnerable | 2026-06-08 07:47:09.765503 |
Tenda W12 Administrative shadow hard-coded credentials
LOW (1.9)
A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used.
Published: 2025-09-01T12:02:08.108Z
Updated: 2025-09-02T15:09:50.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4007 |
not_vulnerable | 2026-06-08 07:29:15.229941 |
Tenda W12/i24 httpd modules cgidhcpsCfgSet stack-based overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-28T07:31:05.788Z
Updated: 2025-04-28T16:16:02.573Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3820 |
not_vulnerable | 2026-06-08 07:23:09.944203 |
Tenda W12/i24 httpd cgiSysUplinkCheckSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the argument hostIp1/hostIp2 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-19T20:31:06.957Z
Updated: 2025-04-21T14:41:40.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3803 |
not_vulnerable | 2026-06-08 07:23:09.922038 |
Tenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-19T15:00:15.751Z
Updated: 2025-04-21T02:34:15.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3802 |
not_vulnerable | 2026-06-08 07:23:09.918094 |
Tenda W12/i24 httpd cgiPingSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The manipulation of the argument pingIP leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-19T14:31:05.921Z
Updated: 2025-04-21T14:58:30.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3693 |
not_vulnerable | 2026-06-08 07:23:09.660427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.