CVE Catalog

CVE-2025-15179

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.87%

58th percentile - higher than 58% of all known CVEs

Summary

Tenda WH450 version 1.0.0.18 has a stack-based buffer overflow vulnerability in the /goform/qossetting function. Manipulation of the page argument causes buffer overflow. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Risk Assessment

Risk of remote code execution or device crash, potentially compromising network integrity.

Recommendation

Update the firmware or apply available patches if provided by the vendor.

Other vulnerabilities in Tenda WH450

See all
Original NVD description (English source)

A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS