CVE Catalog

CVE-2025-57573

MediumCVSS 5.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A buffer overflow vulnerability exists in the Tenda F3 router version V12.01.01.48_multi and later. The issue is triggered via the wifiTimeClose parameter in the goform/setWifi function.

Risk Assessment

An attacker can remotely crash the device or potentially gain control, leading to network security compromise.

Recommendation

Immediately update the Tenda F3 firmware to the latest version if a patch is available. Otherwise, restrict administrative access to trusted networks only.

Original NVD description (English source)

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS