{"cvss":0.0,"datePublished":"2026-01-20T00:00:00Z","dateUpdated":"2026-01-20T00:00:00Z","description":"A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.","dueDate":"","id":"CVE-2025-7417","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"o3_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Tenda o3_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Tenda"}