CVE Catalog

CVE-2025-15160

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.87%

57th percentile - higher than 57% of all known CVEs

Summary

A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Risk Assessment

A remote attacker can cause a buffer overflow, potentially leading to arbitrary code execution or device crash.

Recommendation

Update the Tenda WH450 firmware to the latest version or apply available security patches.

Other vulnerabilities in Tenda WH450

See all
Original NVD description (English source)

A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS