CVE-2025-15047

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18

Description A stack-based buffer overflow exists in the HTTP Request Handler component of the Tenda WH450. The issue is triggered by manipulating the Username argument in the '/goform/PPTPDClient' file. The attack can be initiated remotely. The exploit has been made public and could be used to hijack devices. Elevated activities targeting this vulnerability have been observed.

Recommendations For Tenda WH450 version 1.0.0.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.