Tenda W12 Firmware 3.0.0.6(3948)
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:w12_firmware:3.0.0.6\(3948\):*:*:*:*:*:*:*
part: o version: 3.0.0.6(3948) update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W12 Firmware (153ec286-5a14-5081-9952-5a5a3a02f755) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9778 |
vulnerable | 2026-06-08 07:47:09.764707 |
Tenda W12 Administrative shadow hard-coded credentials
LOW (1.9)
A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used.
Published: 2025-09-01T12:02:08.108Z
Updated: 2025-09-02T15:09:50.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11550 |
vulnerable | 2026-06-08 07:04:28.479970 |
Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference
MEDIUM (6.5)
A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2025-10-09T18:02:06.757Z
Updated: 2026-02-24T06:56:06.954Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11549 |
vulnerable | 2026-06-08 07:04:28.478510 |
Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-10-09T17:02:06.797Z
Updated: 2026-02-24T06:55:52.346Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.