EUVD-2026-33513
GHSA-w35x-2v63-7ggc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
AnalysisAI
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote authenticated attackers to corrupt memory in the embedded HTTP daemon by supplying an oversized wifiMacFilterSet.macList.mac parameter to the cgiWifiMacFilterSet handler in /bin/httpd. Publicly available exploit code exists, raising the practical risk of device compromise, denial of service, or potential code execution on affected access points, though no CISA KEV listing or active exploitation has been confirmed.
Technical ContextAI
The Tenda W12 is an enterprise-class wireless access point whose web management interface is served by an embedded httpd binary written in C. The vulnerable cgiWifiMacFilterSet function parses MAC address entries supplied through the WiFi MAC filter configuration endpoint and writes them into a fixed-size stack buffer without adequate length validation, matching the CWE-121 (Stack-based Buffer Overflow) root cause class. As is typical in Tenda's MIPS/ARM-based SOHO firmware, the httpd process runs with root privileges and is statically linked, often without modern exploit mitigations such as stack canaries, ASLR, or non-executable stacks on every segment, making memory-corruption bugs in cgi handlers viable paths to control-flow hijack. The CPE cpe:2.3:a:tenda:w12 confirms the issue is scoped to the W12 product line.
RemediationAI
No vendor-released patch identified at time of analysis - the references include only VulDB advisory pages and an exploit archive, with no Tenda security bulletin enumerated. Until Tenda publishes fixed firmware, operators should restrict access to the W12 web management interface to a dedicated management VLAN or trusted admin workstations and block the httpd listener from WAN and untrusted user networks at the perimeter firewall, accepting that this prevents legitimate remote administration. Replace any default or shared administrator credentials with strong unique passwords to raise the bar for the PR:L authentication requirement, monitor for inbound requests to the cgiWifiMacFilterSet endpoint on /bin/httpd, and consult https://www.tenda.com.cn/ and https://vuldb.com/vuln/367472 periodically for an official firmware update; in regulated or high-risk environments, consider replacing the device if no patch becomes available.
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote attackers to corrupt memory in the embedde
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows authenticated remote attackers to corrupt memory
Stack-based buffer overflow in Tenda W12 firmware 3.0.0.7(4763) allows remote attackers with low privileges to corrupt m
Denial of service in Tenda W12 firmware 3.0.0.7(4763) allows a low-privileged remote attacker to crash the web managemen
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today