CVE Catalog

CVE-2025-15178

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.79%

55th percentile - higher than 55% of all known CVEs

Summary

A vulnerability was found in Tenda WH450 1.0.0.18. The HTTP Request Handler component, specifically the file /goform/VirtualSer, is affected. Manipulation of the page argument results in a stack-based buffer overflow. The attack can be launched remotely and the exploit has been made public.

Risk Assessment

A remote attacker could exploit the buffer overflow to execute arbitrary code or crash the device, potentially compromising network security.

Recommendation

Update the Tenda WH450 firmware to the latest version and restrict access to the administrative interface.

Other vulnerabilities in Tenda WH450

See all
Original NVD description (English source)

A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS