ГлавнаяУязвимости → CVE-2025-9297
8.8высокая

CVE-2025-9297

Описание

A vulnerability was detected in Tenda i22 1.0.0.3(4687). This impacts the function formWeixinAuthInfoGet of the file /goform/wxportalauth. Performing manipulation of the argument Type results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

Затрагиваемое ПО
Tenda I22 firmwareTenda I22
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.mdhttps://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.md#pochttps://vuldb.com/?ctiid.320902https://vuldb.com/?id.320902https://vuldb.com/?submit.632332https://www.tenda.com.cn/https://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.mdhttps://github.com/davybat/IoT-Vuls/blob/main/tenda/formWeixinAuthInfoGet.md#poc