CVE-2025-7420 | Tenda O3V2 1.0.0.12(3880) httpd /goform/setWrlBasicInfo formWifiBasicSet extChannel stack-based overflow

July 10, 2025 Yanac

A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/setWrlBasicInfo of the component httpd. The manipulation of the argument extChannel leads to stack-based buffer overflow.

This vulnerability was named CVE-2025-7420. The attack can be initiated remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More