CVE-2025-57572

MEDIUM

Tenda F3 Firmware V12.01.01.48_multi and after - Buffer Overflow via onlineList Parameter

Title source: llm

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl.

Core 2

Core References

Not Applicable

Broken Link

CVSS v3 5.6

EPSS 0.0025

EPSS Percentile 15.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-120

Status published

Products (1)

tenda/f3_firmware 12.01.01.48

Published Sep 10, 2025

Tracked Since Feb 18, 2026