CVE-2025-9748 – Tenda CH22 Remote Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-9748

Published : Aug. 31, 2025, 10:15 p.m. | 45 minutes ago

Description : A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote.

Severity: 9.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…