CVE-2025-15160: Tenda WH450 PPTPServer stack-based overflow
A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15160?
CVE-2025-15160 is classified as a critical vulnerability due to the potential for remote exploitation leading to stack-based buffer overflow.
How do I fix CVE-2025-15160?
To mitigate CVE-2025-15160, update the Tenda WH450 firmware to the latest version that addresses this vulnerability.
What is the impact of CVE-2025-15160?
The impact of CVE-2025-15160 is a stack-based buffer overflow which can lead to unauthorized remote code execution.
Which devices are affected by CVE-2025-15160?
CVE-2025-15160 affects the Tenda WH450 router running firmware version 1.0.0.18.
Can CVE-2025-15160 be exploited remotely?
Yes, CVE-2025-15160 can be exploited remotely, allowing attackers to manipulate arguments to trigger the vulnerability.