CVE-2025-13400

Publication date

2025-11-19 17:02:06

Family

VulDB

State

PUBLISHED

Description

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.