CVE-2025-15006

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18

Description A weakness exists in the Tenda WH450 device. The issue is a stack-based buffer overflow within the HTTP Request Handler component, specifically related to the file '/goform/CheckTools'. Manipulation of the ipaddress argument in this file causes the overflow. The attack can be initiated remotely, and the exploit has been publicly released.

API Endpoints '/goform/CheckTools'

Vulnerable Parameters or Variables ipaddress

Recommendations For Tenda WH450 version 1.0.0.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.