PT-2025-20730 · Tenda · Tenda Fh451

Published 2025-04-10 · Updated 2025-05-23 · CVE-2025-44176

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tenda FH451 version 1.0.0.9

Description The issue concerns a remote code execution vulnerability in the formSafeEmailFilter function. This allows for unauthorized execution of code, potentially leading to security breaches.

Recommendations For Tenda FH451 version 1.0.0.9, consider disabling the formSafeEmailFilter function until a patch is available to prevent remote code execution.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-06186

CVE-2025-44176

Affected Products

Tenda Fh451

References · 8

• 🔥 https://github.com/xubeining/Cve_report/blob/main/Notification%20of%20Remote%20Code%20Execution%20Vulnerability%20in%20Tenda%20FH451%20Router%20%28Version%20V1.0.0.9%29%20by%20Shenzhen%20Jixiang%20Tenda%20Technology.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-44176 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44176 · Security Note
• https://bdu.fstec.ru/vul/2025-06186 · Security Note
• https://t.me/cvenotify/123499 · Telegram Post
• https://twitter.com/CVEnew/status/1921982201752912037 · Twitter Post
• https://t.me/cvedetector/25115 · Telegram Post
• https://t.me/cvetracker/23646 · Telegram Post