Vulnerability Bulletins

CVE-2025-9748

   
Affected software HTTPD
 
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-9748