← back
CVE-2025-14526

Tenda CH22 L7Im frmL7ImForm buffer overflow

CVSS 8.7 HIGHEPSS 0.7%CWE-119CWE-120
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.7EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A security flaw has been discovered in Tenda CH22 1.0.0.1. This affects the function frmL7ImForm of the file /goform/L7Im. Performing a manipulation of the argument page results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · CH22

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/maximdevere/CVE2/issues/5https://github.com/maximdevere/CVE2/issues/5#issue-3673676260https://vuldb.com/?ctiid.335866https://vuldb.com/?id.335866https://vuldb.com/?submit.703035https://www.tenda.com.cn/