CVE-2026-4042

HIGH

Tenda i12 1.0.0.6(2204) - Buffer Overflow

Title source: llm
STIX 2.1

Description

A weakness has been identified in Tenda i12 1.0.0.6(2204). The affected element is the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. This manipulation of the argument index causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Scores

CVSS v3 8.8
EPSS 0.0009
EPSS Percentile 25.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-119 CWE-121 CWE-787
Status published
Products (1)
tenda/i12_firmware 1.0.0.6\(2204\)
Published Mar 12, 2026
Tracked Since Mar 12, 2026