CVE-2025-2995

MEDIUM

Tenda FH1202 1.2.0.14(408) - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-2995. PoCs published by huynguyen12536.

AI-analyzed exploit summary This repository demonstrates an authorization bypass vulnerability (CVE-2025-29927) in Next.js by exploiting the `x-middleware-subrequest` header to bypass middleware authentication checks. The PoC includes a functional Next.js application with middleware that can be bypassed using nested middleware paths in the header.

Description

A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects unknown code of the file /goform/SysToolChangePwd of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

nomisec WORKING POC
by huynguyen12536 · poc
https://github.com/huynguyen12536/CVE-2025-2995

This repository demonstrates an authorization bypass vulnerability (CVE-2025-29927) in Next.js by exploiting the `x-middleware-subrequest` header to bypass middleware authentication checks. The PoC includes a functional Next.js application with middleware that can be bypassed using nested middleware paths in the header.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Next.js (versions 11 to 14)
No auth needed
Prerequisites: Access to a vulnerable Next.js application · Ability to send HTTP requests with custom headers
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.302044
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.302044
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.523418
Product broken-link product
https://www.tenda.com.cn/

Scores

CVSS v3 5.3
EPSS 0.0065
EPSS Percentile 46.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-266 CWE-284
Status published
Products (1)
tenda/fh1202_firmware 1.2.0.14\(408\)
Published Mar 31, 2025
Tracked Since Feb 18, 2026