CVE-2025-7551: Tenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflow
A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7551?
CVE-2025-7551 has been declared as critical due to its potential to cause significant harm.
What is the main issue described in CVE-2025-7551?
CVE-2025-7551 involves a stack-based buffer overflow triggered by the manipulation of the username argument in the function fromPptpUserAdd.
Which product is affected by CVE-2025-7551?
The vulnerability CVE-2025-7551 affects the Tenda FH1201 router.
How do I fix CVE-2025-7551?
To fix CVE-2025-7551, update the Tenda FH1201 to the latest firmware version supplied by the vendor.
What impact can CVE-2025-7551 have on my network?
CVE-2025-7551 can allow attackers to execute arbitrary code or crash the affected device, compromising network security.