CVE-2025-29149

HIGH 7.5EPSS 0.5%

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.47% chance of exploitation in the next 30 days, 39th percentile
Published: 2025-03-20
Updated: 2025-03-21

Proof-of-concept exploits (1)

Raining-101/IOT_cve/blob/main/tenda%20i12formSetAutoPing_ping1.md

References

Related