Miembros de
Boletines de Vulnerabilidades |
CVE-2025-4007 |
|
| Software afectado | HTTPD |
| A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the component httpd. The manipulation of the argument json leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-4007 | |
