CVE-2025-7414 | Tenda O3V2 1.0.0.12(3880) httpd /goform/setPingInfo fromNetToolGet domain os command injection

July 10, 2025 Yanac

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection.

This vulnerability was named CVE-2025-7414. The attack can be initiated remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More