PT-2025-53707
CVE-2025-15180
·
Published
2025-12-29
·
Updated
2026-10-07
Description by
CVSS 2.0
8.3
HighMetricsAV:N/AC:L/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Tenda WH450 version 1.0.0.18
Description
A flaw exists in the HTTP Request Handler component of Tenda WH450 version 1.0.0.18. Specifically, manipulation of the
page argument within the /goform/webExcptypemanFilte file can trigger a stack-based buffer overflow. This issue can be exploited remotely. An exploit is publicly available.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾