ГлавнаяУязвимости → CVE-2025-9006
8.8высокая

CVE-2025-9006

→ есть в БДУ: BDU:2025-10975 (на русском)
Описание (на английском; русское — в БДУ выше)

A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Затрагиваемое ПО
Tenda Ch22 firmwareTenda Ch22
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/moweizhang1994/cve/issues/2https://vuldb.com/?ctiid.320035https://vuldb.com/?id.320035https://vuldb.com/?submit.628845https://www.tenda.com.cn/https://github.com/moweizhang1994/cve/issues/2