CVE Catalog

CVE-2025-15180

HighCVSS 7.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.09%

64th percentile - higher than 64% of all known CVEs

Summary

Tenda WH450 version 1.0.0.18 has a stack-based buffer overflow vulnerability in the /goform/webExcptypemanFilte function. Manipulation of the page argument can lead to buffer overflow. The attack can be launched remotely, and the exploit is publicly available.

Risk Assessment

Risk of remote code execution or device crash, potentially compromising network integrity.

Recommendation

Update the firmware or apply available patches if provided by the vendor.

Other vulnerabilities in Tenda WH450

See all
Original NVD description (English source)

A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS