CVE-2025-7468: high-severity vulnerability in Tenda FH1201
Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.0%
A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · FH1201Related CVEs — Tenda FH1201
In the same product, most dangerous first.
CVE-2025-6110HIGHTenda FH1201 SafeMacFilter stack-based overflowEPSS 5.6%CVE-2025-7551HIGHTenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 1.2%CVE-2025-7463HIGHTenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflowEPSS 1.2%CVE-2025-7550HIGHTenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowEPSS 1.0%CVE-2025-7549HIGHTenda FH1201 L7Prot frmL7ProtForm stack-based overflowEPSS 1.0%CVE-2025-7548HIGHTenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.0%