CVE-2025-11550 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Re…
High CVSS: 7.1

CVE-2025-11550

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.
Vendor
Tenda
Product
W12 Firmware
CWE
CWE-404
Yayın Tarihi
2025-10-09 18:15:48
Güncelleme
2025-10-20 20:42:34
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 W12 Firmware HIGH Tenda 2025

Referanslar

https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/Tenda_W12/cgiWifiScheduledSet/cgiWifiScheduledSet.md https://vuldb.com/?ctiid.327709 https://vuldb.com/?id.327709 https://vuldb.com/?submit.670118 https://www.tenda.com.cn/ https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/Tenda_W12/cgiWifiScheduledSet/cgiWifiScheduledSet.md