Stack-Based Buffer Overflow in Tenda CH22 Router

CVE-2025-9748

What is CVE-2025-9748?

A security vulnerability has been identified in the Tenda CH22 router version 1.0.0.1, specifically in the handling of the ipsecno argument within the IPSECsave function of the httpd component. This flaw allows for a stack-based buffer overflow, potentially enabling attackers to execute arbitrary code remotely. Exploitation of this vulnerability could compromise the integrity and availability of the router, highlighting the importance of timely updates and security measures for affected users.

References