Tenda w12 Firmware vulnerabilities

8 CVEs affecting Tenda w12 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-11550, published 2025-10-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3820, published 2025-04-19. High severity, CVSS 8.8. EPSS: 12.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this issue is the function cgiSysUplinkCheckSet of the file /bin/httpd. The…
CVE-2025-11549, published 2025-10-09. Critical severity, CVSS 9.8. EPSS: 8.5% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of…
CVE-2025-3693, published 2025-04-16. Critical severity, CVSS 9.8. EPSS: 7.4% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. The manipulation leads to stack-based…
CVE-2025-3802, published 2025-04-19. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulnerability affects the function cgiPingSet of the file /bin/httpd. The…
CVE-2025-4007, published 2025-04-28. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vulnerability is the function cgidhcpsCfgSet of the file /goform/modules of the…
CVE-2025-3803, published 2025-04-19. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The…
CVE-2025-11550, published 2025-10-09. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the…
CVE-2025-9778, published 2025-09-01. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda W12 up to 3.0.0.6(3948). Affected is an unknown function of the file /etc_ro/shadow of the component Administrative Interface. The manipulation…