CVE-2025-3803 | BDVDB-2026-275813 Detail

Description#

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-04-19Record published in the CVE List.
2. Version 22025-04-21Most recent update recorded in the CVE List.