ГлавнаяУязвимости → CVE-2025-9007
8.8высокая

CVE-2025-9007

→ есть в БДУ: BDU:2025-10976 (на русском)
Описание (на английском; русское — в БДУ выше)

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Затрагиваемое ПО
Tenda Ch22 firmwareTenda Ch22
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/moweizhang1994/cve/issues/3https://vuldb.com/?ctiid.320036https://vuldb.com/?id.320036https://vuldb.com/?submit.628867https://www.tenda.com.cn/https://github.com/moweizhang1994/cve/issues/3