Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Tenda O3 1.0.0.10(2478). Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🚨 HIGH: CVE-2025-12210 (CVSS 8.8) - Stack-based buffer overflow in Tenda O3 router 1[.]0[.]0[.]10(2478). Remote exploitation possible via /goform/AdvSetLanip. Public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/OQJLxj4DLr
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | o3 | 2.0 | - | - |
| OS | tenda | o3_firmware1.0.0.10\(2478\) | - | - | - |