PT-2025-53704
CVE-2025-15178
·
Published
2025-12-29
·
Updated
2026-10-07
Description by
CVSS 2.0
8.3
HighMetricsAV:N/AC:L/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Tenda WH450 version 1.0.0.18
Description
A flaw exists in the HTTP Request Handler component of Tenda WH450 version 1.0.0.18. The issue relates to stack-based buffer overflow triggered by manipulating the
page argument when processing the file '/goform/VirtualSer'. This allows for remote attacks. The exploit for this issue has been publicly released.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾