Medium severity · published Oct 9, 2025
CVE-2025-11550
A vulnerability was found in Tenda W12 3.0.0.6(3948)
6.5
CVSS
1%
EPSS
No
On KEV
Description
A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from remote. The exploit has been made public and could be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
W12 Firmware · Tenda
3.0.0.6(3948) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11550
Exploit
https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/Tenda_W12/cgiWifiScheduledSet/cgiWifiScheduledSet.md
Permissions Required
https://vuldb.com/?ctiid.327709
Third Party Advisory
https://vuldb.com/?id.327709
Third Party Advisory
https://vuldb.com/?submit.670118
Product
https://www.tenda.com.cn/
More from W12 Firmware
9.8
CVE-2025-11549
A vulnerability has been found in Tenda W12 3.0.0.6(3948)
9.8
CVE-2025-3693
A vulnerability was found in Tenda W12 3.0.0.5
8.8
CVE-2026-10192
Tenda W12 httpd set_local_time_0 stack-based overflow
8.8
CVE-2026-10191
Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow
8.8
CVE-2026-10189
Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow