Is there a public PoC exploit available for CVE-2025-11550?

Yes, a public proof-of-concept exploit is available for CVE-2025-11550. Prioritise patching immediately. EPSS: 0.1%.

Tenda W12 CVE-2025-11550

Q: What is the CVSS score of CVE-2025-11550?

CVE-2025-11550 has a CVSS 4.0 base score of 5.7 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2025-10-09 cna@vuldb.com

Denial Of Service Tenda W12 Firmware

5.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.7 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-accessible, low complexity, low privileges required, no user interaction, availability impact only.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 18:56 vuln.today

CVE Published

Oct 09, 2025 - 18:15 cve.org

MEDIUM 5.7

DescriptionCVE.org

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.

AnalysisAI

Denial-of-service in Tenda W12 router firmware 3.0.0.6(3948) via a null pointer dereference in the wifiScheduledSet HTTP request handler. A remote attacker with low-privilege credentials can trigger the flaw to disrupt router availability. Public exploit code exists, but active exploitation has not been confirmed (CISA KEV absent) and the EPSS score (0.09%) suggests a low probability of widespread exploitation.

Technical ContextAI

The vulnerability resides in the web management interface of the Tenda W12 wireless router. The firmware runs an embedded HTTP server that handles requests to the /goform/modules endpoint; the flawed wifiScheduledSet function is invoked when processing the corresponding argument. A null pointer dereference (CWE-404) occurs due to insufficient validation of the wifiScheduledSet parameter, likely causing the process to crash. The CPE cpe:2.3:o:tenda:w12_firmware:3.0.0.6\(3948\) confirms the exact affected firmware version.

RemediationAI

No vendor-released patch has been identified. As an immediate mitigation, restrict access to the router's web management interface by disabling remote administration from the Internet, blocking external access to the admin port (typically TCP 80/443), and using strong, unique credentials. Consider isolating the device on a separate network segment. These controls will prevent remote exploitation but may limit legitimate remote management; users should weigh the trade-offs.