What is the CVSS score of CVE-2025-7596?

CVE-2025-7596 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Fh1205 Firmware are affected by CVE-2025-7596?

A critical remote code execution vulnerability affects Tenda FH1205 wireless routers (version 2.0.0.7) with no vendor patch currently available.

Is there a public PoC exploit available for CVE-2025-7596?

Yes, a public proof-of-concept exploit is available for CVE-2025-7596. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-7596?

Within 24 hours: Inventory all Tenda FH1205 devices in production and isolate affected units from critical network segments if feasible. Within 7 days: Implement network segmentation to restrict router management access and monitor for exploitation attempts; contact Tenda for patch timeline. Within 30 days: Develop a replacement strategy for affected devices and deploy alternative router models from vendors with active security support.

Fh1205 Firmware CVE-2025-7596

EUVD-2025-21339 HIGH

Buffer Overflow (CWE-119)

2025-07-14 cna@vuldb.com

Buffer Overflow Tenda Fh1205 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2025-21339

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

PoC Detected

Jul 17, 2025 - 17:52 vuln.today

Public exploit code

CVE Published

Jul 14, 2025 - 11:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in Tenda FH1205 2.0.0.7(775). It has been rated as critical. This issue affects the function formWifiExtraSet of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A critical stack-based buffer overflow vulnerability exists in Tenda FH1205 firmware version 2.0.0.7(775) within the WifiExtraSet web form handler, triggered via the wpapsk_crypto parameter. This authenticated remote vulnerability allows attackers with user-level privileges to achieve complete system compromise including code execution, data theft, and device disruption. The vulnerability has public exploit disclosure and active exploitation potential, making it a high-priority security concern for deployed devices.

Technical ContextAI

The vulnerability is a classic stack-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer) in the formWifiExtraSet function accessible via the /goform/WifiExtraSet endpoint. The Tenda FH1205 is a 802.11ac dual-band wireless router that processes user-supplied Wi-Fi configuration parameters. The wpapsk_crypto parameter lacks proper input validation and length checking before being copied to a fixed-size stack buffer. The affected firmware version 2.0.0.7(775) represents the vulnerable firmware line. The vulnerability exploits insufficient bounds checking in the wireless security parameter handling code, allowing stack memory corruption that can be leveraged for arbitrary code execution within the router's embedded Linux environment.

RemediationAI

Immediate actions: (1) Check current firmware version via device admin panel (typically 192.168.0.1); (2) Visit Tenda's official support website and download the latest available firmware for FH1205 (versions after 2.0.0.7(775) if released); (3) Perform factory reset if no newer firmware available and device is exposed to untrusted networks; (4) Temporary mitigations pending patch: restrict administrative access to trusted IPs only using access control lists; disable remote management features; use strong, unique credentials for router admin accounts; segment the router from critical devices. (5) Monitor Tenda security advisories and firmware releases at tenda.com.cn/en/news/. (6) If a patched firmware version becomes available, apply it immediately via the web administration interface following Tenda's update procedures.