CVE-2025-57569: Tenda f3 Firmware

Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.

Affected products

• Tenda f3 Firmware: version 12.01.01.48 only

Published 2025-09-10. Last modified 2026-07-05.