CVE-2025-7434: Tenda FH451 POST Request addressNat fromAddressNat stack-based overflow
A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical. Affected by this issue is the function fromAddressNat of the file /goform/addressNat of the component POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7434?
CVE-2025-7434 is classified as critical due to the potential for stack-based buffer overflow.
How do I fix CVE-2025-7434?
To remediate CVE-2025-7434, update the Tenda FH451 firmware to the latest version beyond 1.0.0.9.
What systems are affected by CVE-2025-7434?
CVE-2025-7434 affects Tenda FH451 devices with firmware versions up to and including 1.0.0.9.
What type of vulnerability is CVE-2025-7434?
CVE-2025-7434 is a stack-based buffer overflow vulnerability resulting from improper handling of POST request arguments.
What is the attack vector for CVE-2025-7434?
The attack vector for CVE-2025-7434 involves manipulating the argument 'page' in the fromAddressNat function within the POST Request Handler.