CVE-2025-15010: falha crítica em Tenda WH450
Tenda WH450 SafeUrlFilter stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 1.0%
A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/SafeUrlFilter. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · WH450CVEs relacionadas — Tenda WH450
No mesmo produto, das mais perigosas para as menos.
CVE-2025-15048MEDIUMTenda WH450 HTTP Request CheckTools command injectionEPSS 12.3%CVE-2025-14879CRITICALTenda WH450 HTTP Request onSSIDChange stack-based overflowEPSS 6.7%CVE-2025-15047CRITICALTenda WH450 HTTP Request PPTPDClient stack-based overflowEPSS 1.2%CVE-2025-15180HIGHTenda WH450 HTTP Request webExcptypemanFilte stack-based overflowEPSS 1.1%CVE-2025-15161HIGHTenda WH450 PPTPUserSetting stack-based overflowEPSS 1.1%CVE-2025-15046CRITICALTenda WH450 HTTP Request PPTPClient stack-based overflowEPSS 1.1%
Referências
https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SafeUrlFilter/SafeUrlFilter.mdhttps://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SafeUrlFilter/SafeUrlFilter.md#reproducehttps://vuldb.com/?ctiid.337716https://vuldb.com/?id.337716https://vuldb.com/?submit.719219https://www.tenda.com.cn/