A vulnerability, which was classified as critical, has been found in Tenda O3 1.0.0.10(2478). This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing manipulation of the argument enable results in stack-based buffer overflow.

This vulnerability was named CVE-2025-12214. The attack may be initiated remotely. In addition, an exploit is available.