PT-2025-52563 · Tenda · Tenda Fh1201

Z472421519 · Published 2025-12-20 · Updated 2025-12-31 · CVE-2025-14995

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda FH1201 version 1.2.0.14(408)

Description A stack-based buffer overflow exists in the sprintf function within the /goform/SetIpBind file of the Tenda FH1201 router. Manipulation of the page argument can trigger this issue, allowing for remote exploitation. The exploit for this issue has been publicly disclosed and is potentially being used in attacks. Recent reports indicate increased actor activity targeting this vulnerability.

Recommendations Restrict access to the /goform/SetIpBind endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-14995

Affected Products

Tenda Fh1201

References · 19

• 🔥 https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_FH1201/SetIpBind/SetIpBind.md#reproduce · Exploit
• 🔥 https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_FH1201/SetIpBind/SetIpBind.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14995 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14995 · Vendor Advisory
• https://twitter.com/cracbot/status/2004507542463160824 · Twitter Post
• https://t.me/cveNotify/147330 · Telegram Post
• https://vuldb.com/?ctiid.337689 · Note
• https://vuldb.com/?submit.719154 · Note
• https://twitter.com/TheHackerWire/status/2002681102670975479 · Twitter Post
• https://twitter.com/CveFindCom/status/2002675217638846749 · Twitter Post
• https://twitter.com/vuldb/status/2002369939869741451 · Twitter Post
• https://tenda.com.cn · Note
• https://t.me/CVEtracker/40374 · Telegram Post
• https://twitter.com/offseq/status/2002681138586824880 · Twitter Post
• https://t.me/cveNotify/146470 · Telegram Post