CVE-2025-14878: Tenda WH450 HTTP Request wirelessRestart stack-based overflow
A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14878?
CVE-2025-14878 is considered a high-severity vulnerability due to its potential for remote exploitation and its impact on the Tenda WH450.
How do I fix CVE-2025-14878?
To fix CVE-2025-14878, update the Tenda WH450 to the latest firmware that addresses the buffer overflow issue.
What kind of attack can exploit CVE-2025-14878?
CVE-2025-14878 can be exploited through a remote attack that manipulates the GO argument in the HTTP Request Handler.
What are the potential impacts of CVE-2025-14878?
Exploiting CVE-2025-14878 could lead to unauthorized access, data corruption, or system crashes on the affected Tenda WH450 device.
Is CVE-2025-14878 related to remote access vulnerabilities?
Yes, CVE-2025-14878 is a remote access vulnerability that allows attackers to perform a stack-based buffer overflow.