PT-2025-52600 · Tenda · Tenda Wh450

Z472421519

·

Publicado

2025-12-21

·

Atualizado

2025-12-30

·

CVE-2025-15007

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18
Description A security issue exists in Tenda WH450 version 1.0.0.18 related to a stack-based buffer overflow. The issue is located within the HTTP Request Handler component, specifically in the file /goform/L7Im. Manipulation of the page argument can trigger the overflow, allowing for remote exploitation. Public exploit code is available.
Recommendations Restrict access to the HTTP Request Handler component. Disable the functionality associated with the /goform/L7Im file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Stack Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-121

Identificadores relacionados

CVE-2025-15007

Produtos afetados

Tenda Wh450