CVE-2025-14879: Tenda WH450 HTTP Request onSSIDChange stack-based overflow
A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssidindex causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14879?
CVE-2025-14879 is considered high severity due to the potential for remote code execution via stack-based buffer overflow.
How do I fix CVE-2025-14879?
To fix CVE-2025-14879, update the Tenda WH450 firmware to the latest version provided by Tenda.
What is affected by CVE-2025-14879?
CVE-2025-14879 affects the Tenda WH450 version 1.0.0.18 through a vulnerability in the HTTP Request Handler.
Can CVE-2025-14879 be exploited remotely?
Yes, CVE-2025-14879 can be exploited remotely by manipulating the ssid_index argument.
What type of vulnerability is CVE-2025-14879?
CVE-2025-14879 is a stack-based buffer overflow vulnerability.