← Database

CVE-2025-15008

HIGH CVSS: 7.3 Published: 2025-12-22 Modified: 2026-06-17

Description

A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

Affected Platforms

Tenda Wh450 FirmwareTenda Wh450

Weakness Type

CWE-119, CWE-121

References