CVE-2025-7468: fallo de gravedad alta en Tenda FH1201
Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 1.0%
A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Productos afectados
Tenda · FH1201CVEs relacionadas — Tenda FH1201
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-6110HIGHTenda FH1201 SafeMacFilter stack-based overflowEPSS 5.6%CVE-2025-7551HIGHTenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflowEPSS 1.2%CVE-2025-7463HIGHTenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflowEPSS 1.2%CVE-2025-7550HIGHTenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowEPSS 1.0%CVE-2025-7549HIGHTenda FH1201 L7Prot frmL7ProtForm stack-based overflowEPSS 1.0%CVE-2025-7548HIGHTenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflowEPSS 1.0%