CVE-2025-29149

Published Mar 20, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:tenda:i12_firmware:1.0.0.10\(3805\):*:*:*:*:*:*:*

cpe:2.3:h:tenda:i12:-:*:*:*:*:*:*:*

No data.

No data available yet.

No solution or workaround provided in the CVE record

Source	ID	Title
EUVD	EUVD-2025-7175	Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.484% probability within 30 days)

References

Link	Providers
https://github.com/Raining-101/IOT_cve/blob/main/tenda%20i12formSetAutoPing_ping1.md

History

Type	Values Removed	Values Added
First Time appeared		Tenda Tenda i12 Tenda i12 Framework
CPEs		cpe:2.3:h:tenda:i12:-:::::::* cpe:2.3:o:tenda:i12_framework:1.0.0.10\(3805\):::::::*
Vendors & Products		Tenda Tenda i12 Tenda i12 Framework

Type	Values Removed	Values Added
Weaknesses		CWE-121
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.
References		https://github.com/Raining-101/IOT_cve/blob/main/tenda%20i12formSetAutoPing_ping1.md