CVE-2025-8958

Tenda TX3 fast_setting_wifi_set stack-based overflow

HIGH
8.8
CVSS Score
Published: August 14, 2025 at 11:02 AM UTC
Updated: June 17, 2026 at 10:08 AM UTC
1 product affected across 1 vendorTX3 Firmware

Using TX3 by Tenda?

Get instant alerts when new vulnerabilities affect TX3 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.8%
SSVC
PoC

Description

A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (6)

ExploitIssue TrackingMitigationThird Party Advisory
https://github.com/alc9700jmo/CVE/issues/16
SignaturePermissions RequiredVDB Entry
https://vuldb.com/?ctiid.319927
VDB EntryTechnical DescriptionThird Party Advisory
https://vuldb.com/?id.319927
Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.627861
Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.628117

SSVC — Action Prioritization

SSVCPoCNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHVulDB
Vector?

Quick Info

StatusANALYZED
CWE
CWE-119CWE-121

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card