PT-2025-52601 · Tenda · Tenda Wh450

Z472421519

·

Published

2025-12-18

·

Updated

2025-12-27

·

CVE-2025-15010

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18
Description A stack-based buffer overflow issue exists in the processing of the file /goform/SafeUrlFilter within Tenda WH450 version 1.0.0.18. Manipulation of the page argument in this file can lead to the overflow. Remote exploitation is possible, and a public exploit has been disclosed. The vulnerability is related to the SafeUrlFilter() function, where an operation exceeds the boundaries of allocated memory. Successful exploitation could allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. The /goform/SafeUrlFilter API endpoint is affected.
Recommendations For Tenda WH450 version 1.0.0.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121CWE-119

Related Identifiers

BDU:2025-16184
CVE-2025-15010

Affected Products

Tenda Wh450