Tenda W12 Stack-Based Buffer Overflow Vulnerability in cgistaKickOff Function

Vulnerability

A stack-based buffer overflow vulnerability has been identified in the Tenda W12 router, specifically in version 3.0.0.7(4763). The issue arises in the cgistaKickOff function within the /bin/httpd file, where improper handling of the staMac argument can be exploited remotely.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Added: May 31, 2026, 3:18 PM
Updated: May 31, 2026, 3:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
8.7
remediation
0.0
relevance
9.6
threat
6.4
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.