CVE-2025-6113

HIGH

Tenda FH1203 2.0.1.6 - Buffer Overflow via fromadvsetlanip lanMask Parameter

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.312582
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.312582
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.592478
Product product
https://www.tenda.com.cn/

Scores

CVSS v3 8.8
EPSS 0.0103
EPSS Percentile 59.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
tenda/fh1203_firmware 2.0.1.6
Published Jun 16, 2025
Tracked Since Feb 18, 2026