CVE-2025-8958 - Tenda TX3 fast_setting_wifi_set stack-based overflow

Back Back to CVE browser

HIGH

Tenda TX3 fast_setting_wifi_set stack-based overflow

Published Aug 14, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.77%

Description

A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Tenda Product TX3 Default
unknown
Affected
- 16.03.13.11_multi_TDE01

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Tenda	TX3	unknown	Affected 16.03.13.11_multi_TDE01

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24686
Advisory
https://github.com/alc9700jmo/CVE/issues/16
exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/?ctiid.319927
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319927
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.627861
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628117
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24686		Advisory
https://github.com/alc9700jmo/CVE/issues/16		exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/?ctiid.319927		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319927		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.627861		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.628117		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.tenda.com.cn/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Aug 14, 2025

Updated Aug 14, 2025

Reserved Aug 13, 2025

Link CVE-2025-8958

CISA Vulnrichment

Updated Aug 14, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-8958

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Aug 14, 2025

Updated Aug 14, 2025

Link EUVD-2025-24686

GitHub

No data