CVE-2025-11549 | Tenda W12 3.0.0.6(3948) HTTP Request /goform/modules wifiMacFilterSet mac stack-based overflow

October 9, 2025 Yanac

A vulnerability identified as critical has been detected in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2025-11549. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More