Description
A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-05-31
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A stack-based buffer overflow exists in the cgiSysTimeInfoSet function of the Tenda W12 firmware 3.0.0.7(4763). By sending a crafted value for the sec argument to the /bin/httpd handler, an attacker can overwrite return addresses on the stack, which typically enables arbitrary code execution. The vulnerability is classified as CWE‑119 and CWE‑121 and can compromise confidentiality, integrity, and availability of the device when exploited.

Affected Systems

The affected device is the Tenda W12 wireless router running firmware version 3.0.0.7(4763). Only this specific firmware release has been confirmed to contain the flaw; newer releases may have addressed the issue.

Risk and Exploitability

The CVSS v3 score of 8.7 indicates high severity, yet the EPSS score is not available and the issue is not yet listed in the CISA KEV catalog. Exploitation is remotely feasible via the device's HTTP management interface and has already been publicly disclosed, implying that an attacker can trigger the overflow from any network with access to the router's management port. The combination of remote triggerability and the high impact rating results in a significant risk until a patch or mitigation is applied.

Generated by OpenCVE AI on May 31, 2026 at 16:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Tenda W12 firmware to the latest release that includes the buffer‑overflow fix.
  • If an upgrade is unavailable, block or disable the cgiSysTimeInfoSet endpoint by restricting access to the router’s HTTP management interface, for example using a firewall to allow only trusted IP addresses.
  • Apply strict input validation on the sec parameter by configuring the router to accept only valid numeric values, or use the router’s built‑in safety features to reject excessively long inputs.

Generated by OpenCVE AI on May 31, 2026 at 16:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 01 Jun 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 31 May 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Tenda w12
Vendors & Products Tenda w12

Sun, 31 May 2026 15:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Title Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow
First Time appeared Tenda
Tenda w12 Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:tenda:w12_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda w12 Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda W12 W12 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-01T13:28:34.971Z

Reserved: 2026-05-30T16:45:10.724Z

Link: CVE-2026-10189

cve-icon Vulnrichment

Updated: 2026-06-01T13:28:31.433Z

cve-icon NVD

Status : Deferred

Published: 2026-05-31T16:16:41.230

Modified: 2026-06-01T15:15:37.293

Link: CVE-2026-10189

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-31T17:00:07Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow