A vulnerability was found in Tenda CH22 1.0.0.1. It has been classified as critical. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing manipulation of the argument chkHz results in buffer overflow.

This vulnerability is known as CVE-2025-13400. Remote exploitation of the attack is possible. Furthermore, an exploit is available.