CVE-2025-7747: high-severity vulnerability in Tenda FH451
Tenda FH451 POST Request WizardHandle fromWizardHandle buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.0%
A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. The manipulation of the argument PPW leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · FH451Related CVEs — Tenda FH451
In the same product, most dangerous first.
CVE-2026-2911HIGHTenda FH451 GstDhcpSetSer buffer overflowEPSS 3.5%CVE-2025-7795HIGHTenda FH451 P2pListFilter fromP2pListFilter stack-based overflowEPSS 3.4%CVE-2025-7855HIGHTenda FH451 qossetting fromqossetting stack-based overflowEPSS 1.3%CVE-2025-7794HIGHTenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflowEPSS 1.3%CVE-2025-7793HIGHTenda FH451 webtypelibrary formWebTypeLibrary stack-based overflowEPSS 1.3%CVE-2025-7792HIGHTenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.3%