CVE-2025-7530: Tenda FH1202 PPTPDClient fromPptpUserAdd stack-based overflow
A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument Username leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7530?
CVE-2025-7530 has been classified as critical due to its potential for remote exploitation.
How do I fix CVE-2025-7530?
To fix CVE-2025-7530, update Tenda FH1202 to the latest firmware version provided by Tenda.
What impact does CVE-2025-7530 have on Tenda FH1202?
CVE-2025-7530 can lead to a stack-based buffer overflow, which may allow attackers to execute arbitrary code.
Is CVE-2025-7530 easily exploitable?
Yes, CVE-2025-7530 can be easily exploited by attackers who can access the affected function.
What component is affected by CVE-2025-7530?
CVE-2025-7530 affects the fromPptpUserAdd function in the PPTPDClient file on Tenda FH1202.