CVE-2025-12596 - Tenda AC23 saveParentControlInfo buffer overflow

Back Back to CVE browser

HIGH

Tenda AC23 saveParentControlInfo buffer overflow

Published Nov 2, 2025

8.7

HIGH

CVSS 4.0

EPSS 1.21%

Description

A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products

Vendor Tenda Product AC23 Default
n/a
- Version
  16.03.07.52
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

AC23

n/a

Version	Status	Constraints
16.03.07.52	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37441
Advisory
https://github.com/LX-LX88/cve/issues/9
exploitbroken-linkissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.330891
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.330891
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.677585
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37441		Advisory
https://github.com/LX-LX88/cve/issues/9		exploitbroken-linkissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.330891		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.330891		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.677585		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/		product