CVE Catalog

CVE-2025-15177

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.79%

55th percentile - higher than 55% of all known CVEs

Summary

A vulnerability has been found in Tenda WH450 1.0.0.18. The HTTP Request Handler component, specifically the file /goform/SetIpBind, is affected. Manipulation of the page argument leads to a stack-based buffer overflow. The attack can be initiated remotely and the exploit has been disclosed to the public.

Risk Assessment

A remote attacker could exploit this vulnerability to execute code or crash the device, potentially compromising network security.

Recommendation

Update the Tenda WH450 firmware to the latest version and secure the administrative interface.

Other vulnerabilities in Tenda WH450

See all
Original NVD description (English source)

A vulnerability has been found in Tenda WH450 1.0.0.18. This vulnerability affects unknown code of the file /goform/SetIpBind of the component HTTP Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS