EUVD-2026-33512
GHSA-hgcw-qw4m-rwrh
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.
AnalysisAI
Denial of service in Tenda W12 firmware 3.0.0.7(4763) allows a low-privileged remote attacker to crash the web management daemon by sending a crafted value for the 'web_over_time' argument to the cgiSysWebTimeoutSet handler in /bin/httpd. The availability impact is rated High (A:H), meaning successful exploitation renders the router's management interface - and potentially the device itself - unresponsive. A proof-of-concept exploit archive has been publicly released, lowering the barrier to exploitation, though this vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Technical ContextAI
The affected component is the /bin/httpd web server process embedded in Tenda W12 router firmware, specifically the cgiSysWebTimeoutSet CGI handler responsible for configuring web session timeout values. CWE-404 (Improper Resource Shutdown or Release) indicates the root cause is a failure to properly close or free resources when the 'web_over_time' argument is supplied with unexpected or malformed input, likely causing the httpd process to hang, loop indefinitely, or crash without recovering. The CPE string cpe:2.3:a:tenda:w12:*:*:*:*:*:*:*:* uses wildcards for the version field, suggesting NVD has not yet constrained the affected range beyond what the VulDB report documents; the confirmed-tested version is 3.0.0.7(4763). As a SOHO router, the httpd process typically handles both LAN-side and optionally WAN-side management traffic.
RemediationAI
No vendor-released patch has been identified at time of analysis; the Tenda product page (https://www.tenda.com.cn/) does not list a remediated firmware version. As an immediate compensating control, administrators should disable or restrict access to the Web Management Interface from untrusted networks - specifically, disable WAN-side remote management if enabled, as this is typically a non-default setting on Tenda routers whose disabling carries no functional trade-off for most users. On the LAN side, restrict management access to specific trusted hosts using ACLs or VLAN segmentation where the router supports it. Changing default credentials eliminates exploitation by unauthenticated network-adjacent attackers who might otherwise leverage default credentials to satisfy the PR:L requirement. Monitor VulDB (https://vuldb.com/cve/CVE-2026-10190) and the Tenda support site for firmware updates addressing this issue.
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote attackers to corrupt memory in the embedde
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote authenticated attackers to corrupt memory
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows authenticated remote attackers to corrupt memory
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote attackers with low privileges to corrupt m
Same weakness CWE-404 – Improper Resource Shutdown or Release
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today