Cloudanix VulnDB

CVE-2025-12619

Critical · 9.8

CVSS

9.8

EPSS

0.9%

Published

Nov 3, 2025

CISA due date

—

The record

A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapsk_crypto2_4g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Affected packages

Ecosystem Package Introduced Fixed