CVE-2025-15178: Tenda WH450 HTTP Request VirtualSer stack-based overflow
A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15178?
CVE-2025-15178 has a high severity rating due to its potential for remote exploitation and stack-based buffer overflow.
How do I fix CVE-2025-15178?
To fix CVE-2025-15178, update the Tenda WH450 device to the latest firmware version that addresses this vulnerability.
What type of vulnerability is CVE-2025-15178?
CVE-2025-15178 is a stack-based buffer overflow vulnerability affecting the HTTP Request Handler of the Tenda WH450.
Can CVE-2025-15178 be exploited remotely?
Yes, CVE-2025-15178 can be exploited remotely by manipulating the argument in the HTTP request.
Which product is affected by CVE-2025-15178?
CVE-2025-15178 affects the Tenda WH450 device running version 1.0.0.18.