PT-2025-30094 · Tenda · Tenda Fh451

Panda_0X1

·

Published

2025-07-15

·

Updated

2025-07-21

·

CVE-2025-7805

CVSS v2.0
9.0
VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda FH451 version 1.0.0.9
Description A critical vulnerability exists due to a stack-based buffer overflow in the 
fromPptpUserSetting
function within the 
/goform/PPTPUserSetting
file. The vulnerability is triggered by manipulating the 
delno
argument. This issue is remotely exploitable.
Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the 
/goform/PPTPUserSetting
file to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119CWE-121

Related Identifiers

BDU:2025-08936
CVE-2025-7805

Affected Products

Tenda Fh451