CVE-2025-14526

CWE-119 — Buffer OverflowCWE-120 — Classic Buffer Overflow4 documents4 sources
Severity
7.4HIGH
EPSS
0.0%
top 85.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tenda Ch22Tenda Ch22 Firmware
Timeline
PublishedDec 11

Description

A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation of the argument page results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5tenda/ch221.0.0.1
▶NVDtenda/ch22_firmware1.0.0.1

🔴Vulnerability Details

2
CVEList
Tenda CH22 L7Im frmL7ImForm buffer overflow↗2025-12-11
▶
GHSA
GHSA-rh6w-m6gv-w9ff: A security flaw has been discovered in Tenda CH22 1↗2025-12-11
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Tenda L7Im page Parameter Buffer Overflow Attempt (CVE-2025-14526)↗2025-05-08
▶