CVE-2026-10190
Denial of Service in Tenda W12 Router Firmware
Publication date: 2026-05-31
Last updated on: 2026-05-31
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | w12 | 3.0.0.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-404 | The product does not release or incorrectly releases a resource before it is made available for re-use. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Tenda W12 device, specifically in the Web Management Interface component's function cgiSysWebTimeoutSet. By manipulating the argument web_over_time, an attacker can cause a denial of service (DoS) condition. The attack can be launched remotely, and an exploit has already been made public.
The vulnerability likely involves sending specially crafted input to the web server, causing it to crash or become unresponsive. The exact technical details are obscured, but it is related to the handling of web timeout settings and may involve memory corruption or buffer overflow.
How can this vulnerability impact me? :
This vulnerability can cause a denial of service on the affected device, making the web management interface unavailable. This means that legitimate users may be unable to access or manage the device remotely while the attack is ongoing.
Since the attack can be performed remotely without user interaction, it could be exploited by attackers to disrupt network operations or device management, potentially impacting network reliability and administrative control.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability affects the function cgiSysWebTimeoutSet of the Tenda W12 Web Management Interface and can be exploited remotely by manipulating the argument web_over_time to cause a denial of service.
To detect this vulnerability on your network or system, you can monitor HTTP requests targeting the /bin/httpd component, specifically looking for requests that invoke the cgiSysWebTimeoutSet function with unusual or malformed web_over_time parameters.
Suggested commands to detect potential exploitation attempts include using network monitoring tools like tcpdump or Wireshark to filter HTTP traffic for suspicious requests:
- tcpdump -i <interface> -A 'tcp port 80 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0)' | grep 'cgiSysWebTimeoutSet'
- Using curl or wget to test the endpoint manually by sending crafted requests to /bin/httpd with the web_over_time parameter to observe if the system becomes unresponsive.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the Web Management Interface of the Tenda W12 device to trusted networks only, such as by using firewall rules or network segmentation.
Additionally, monitor and block suspicious HTTP requests that attempt to exploit the cgiSysWebTimeoutSet function by filtering or rate-limiting requests containing the web_over_time parameter.
If possible, update the device firmware to a version that addresses this vulnerability or apply any vendor-provided patches.
As a temporary workaround, disable remote access to the Web Management Interface until a fix is applied.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.