EUVD-2026-19541
GHSA-frp6-hv3g-9wcp
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.
AnalysisAI
Remote code execution in Tenda CX12L firmware version 16.03.53.12 allows authenticated attackers to overflow stack buffers via malicious 'page' parameter values sent to the addressNat endpoint (/goform/addressNat). The fromAddressNat function fails to validate input length, enabling memory corruption with high impact to confidentiality, integrity, and availability. Publicly available exploit code exists (GitHub POC), elevating practical exploitation risk despite requiring low-privilege authentication. EPSS data not available, but CVSS 7.4 reflects network-accessible attack vector with low complexity.
Technical ContextAI
This vulnerability affects the Tenda CX12L router firmware (CPE: cpe:2.3:a:tenda:cx12l:*:*:*:*:*:*:*:*), specifically version 16.03.53.12. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), occurring in the fromAddressNat function within the /goform/addressNat component responsible for Network Address Translation configuration. Stack-based buffer overflows occur when unchecked user input exceeds allocated stack memory boundaries, allowing attackers to overwrite adjacent memory including return addresses and function pointers. In embedded router firmware, these components typically handle web-based management interfaces, where CGI-like form handlers process HTTP parameters. The 'page' argument lacks proper bounds checking before being copied to a fixed-size stack buffer, creating the overflow condition. Successful exploitation can redirect program execution flow to attacker-controlled code or cause denial of service through crashes.
RemediationAI
No vendor-released patch identified at time of analysis. Organizations should immediately check Tenda's support portal (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-5685 or contact Tenda technical support directly for remediation guidance. As interim risk mitigation, disable remote management access to the router's web interface, restricting administrative access to trusted internal networks only. Implement network segmentation to isolate vulnerable devices from critical assets. Change default administrative credentials to strong, unique passwords to raise the authentication barrier. Monitor router logs for suspicious access attempts to /goform/addressNat endpoints. Consider replacing affected devices with alternative router models if vendor patches are not released within acceptable risk timelines. Review VulDB references (https://vuldb.com/vuln/355512 and https://vuldb.com/vuln/355512/cti) for ongoing threat intelligence updates and community-reported mitigation strategies.
Stack-based buffer overflow in Tenda CX12L 16.03.53.12 routers allows remote attackers with low privileges to corrupt me
Stack-based buffer overflow in the Tenda CX12L router (firmware 16.03.53.12) allows authenticated remote attackers to co
Stack-based buffer overflow in Tenda CX12L wireless router firmware 16.03.53.12 allows authenticated adjacent network at
Stack-based buffer overflow in Tenda CX12L firmware version 16.03.53.12 allows authenticated local network attackers to
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today