high8.8
CVE-2025-4298
A vulnerability was found in Tenda AC1206 up to 15.03.06.23.
Impact
A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Ac1206 Firmware | through 15.03.06.23 |