Vulnerability · Published Oct 9, 2025 · Assigned by VulDB
CVE-2025-11550Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference
Medium 6.5
In plain English
A medium-severity null pointer dereference in W12 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.0%top 37.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.
Affected products (as reported)
Weakness: CWE-476, CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R
References
- VDB-327709 | Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference vdb-entry, technical-description
- VDB-327709 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #670118 | Tenda W12 V3.0.0.6(3948) NULL Pointer Dereference third-party-advisory
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/Tenda_W12/cgiWifiScheduledSet/cgiWifiScheduledSet.md exploit
- https://www.tenda.com.cn/ product