CVE-2025-55613
Published: 22 August 2025
Summary
CVE-2025-55613 is a critical-severity Classic Buffer Overflow (CWE-120) vulnerability in Tenda O3 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 32.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly prevents buffer overflow exploitation by enforcing validation of the malicious mac parameter input to the fromSafeSetMacFilter function.
Implements memory safeguards such as non-executable stacks and address randomization to block arbitrary code execution from the buffer overflow.
Requires timely remediation of the specific buffer overflow flaw in the Tenda O3V2 firmware's fromSafeSetMacFilter function via patching.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in the fromSafeSetMacFilter function via mac parameter in Tenda O3V2 router web interface enables remote exploitation of a public-facing application for potential RCE or DoS.
NVD Description
Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.
Deeper analysisAI
CVE-2025-55613 is a buffer overflow vulnerability (CWE-120) affecting the Tenda O3V2 firmware version 1.0.0.12(3880). The issue resides in the fromSafeSetMacFilter function, which can be triggered via a specially crafted mac parameter. Published on 2025-08-22, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical.
Remote attackers can exploit this vulnerability without authentication or user interaction by sending a malicious request to the affected component. Successful exploitation enables high-impact compromise of confidentiality, integrity, and availability, potentially allowing arbitrary code execution and full device takeover.
Mitigation details are available in the referenced advisory at https://github.com/wudipjq/my_vuln/blob/main/Tenda3/vuln_58/58.md.
Details
- CWE(s)