CVE-2025-9812
Published: 02 September 2025
Summary
CVE-2025-9812 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Tenda Ch22 Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 48.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly remediates the buffer overflow flaw in the formexeCommand function by identifying, patching, and testing firmware updates for the Tenda CH22.
Enforces validation of the cmdinput argument to prevent buffer overflows due to improper bounds checking in /goform/exeCommand.
Implements memory protections like non-executable stacks and ASLR to mitigate exploitation of the buffer overflow leading to code execution or crashes.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in network-accessible web form (/goform/exeCommand) directly enables remote code execution on a public-facing device interface.
NVD Description
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be performed from remote. The exploit has been…
more
publicly disclosed and may be utilized.
Deeper analysisAI
CVE-2025-9812 is a buffer overflow vulnerability in Tenda CH22 firmware version 1.0.0.1, specifically affecting the formexeCommand function within the /goform/exeCommand file. The flaw is triggered by manipulating the cmdinput argument, leading to improper bounds checking and potential memory corruption. It is classified under CWE-119 and CWE-120, with a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Remote attackers with low privileges, such as authenticated users, can exploit this vulnerability over the network with low complexity and no user interaction required. Successful exploitation enables high-impact outcomes on confidentiality, integrity, and availability, including potential arbitrary code execution or system crashes via the buffer overflow.
Advisories and details are available from VulDB entries (https://vuldb.com/?ctiid.322139, https://vuldb.com/?id.322139, https://vuldb.com/?submit.641148) and the vendor site (https://www.tenda.com.cn/). A proof-of-concept exploit has been publicly disclosed on GitHub (https://github.com/csgii/cve/issues/1) and may be utilized by attackers.
Details
- CWE(s)