CVE-2025-12619: Tenda a15 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/openNetworkGateway. The manipulation of the argument wpapsk_crypto2_4g results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Affected products

• Tenda a15 Firmware: version 15.13.07.13 only

Published 2025-11-03. Last modified 2026-06-17.