CVE-2025-15007
CriticalSummary
A vulnerability in Tenda WH450 1.0.0.18 affects unknown functionality in the file /goform/L7Im of the HTTP Request Handler component. Manipulation of the argument page leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit has been publicly disclosed.
Risk Assessment
Potential for remote code execution or device crash, allowing an attacker to take control of the router and disrupt network operations.
Recommendation
Update the device firmware and restrict administrative access to trusted networks only.
Original NVD description (English source)
A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.