VULNERABILITY INTELLIGENCE

CVE-2025-13288

CVSS score8.8 HIGH

EPSS probability0.95%

CISA KEVNot currently listed

Published2025-11-17

Last modified2026-10-18

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Weakness classification

cna@vuldb.com: CWE-119

Primary references

cna@vuldb.com — Exploit, Issue Tracking
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Product