CVE-2025-15044: Tenda WH450 NatStaticSetting stack-based overflow
A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15044?
CVE-2025-15044 is classified as a high severity vulnerability due to its potential for remote exploitation and stack-based buffer overflow.
How do I fix CVE-2025-15044?
To fix CVE-2025-15044, update the firmware of the Tenda WH450 to the latest available version provided by the vendor.
What impact does CVE-2025-15044 have on my Tenda WH450 device?
CVE-2025-15044 can lead to unauthorized remote access and potential system compromise through stack-based buffer overflow.
Can CVE-2025-15044 be exploited remotely?
Yes, CVE-2025-15044 can be exploited remotely, allowing an attacker to manipulate vulnerable arguments over the network.
Is there a workaround for CVE-2025-15044 if I cannot update my device immediately?
As a temporary measure, consider restricting external access to the Tenda WH450 and monitoring network traffic for unusual activity.