Skip to content
OpenAdvisories
High · 8.8 CVE-2025-12271 EUVD-2025-36166GHSA-45hf-j6rv-ww72

Tenda CH22 RouteStatic fromRouteStatic buffer overflow

Published Oct 27, 2025 · Updated Feb 24, 2026 · Assigned by VulDB

Description

A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected products

VendorProductAffectedFixed
Tenda CH22 1.0.0.1 —

References