Critical · published December 24, 2025
🚨 A single malicious request can trigger a stack-based buffer overflow in Tenda WH450, making your router more vulnerable than a castle with no drawbridge! 🔥 Think of this vulnerability like a delivery driver who gets the address wrong and accidentally drops a package through an open window instead of the front door — if they send the wrong package, it could cause chaos inside! An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially taking full control of your router and compromising your entire network. This means they could snoop on your traffic, manipulate settings, or even launch further attacks. Absolutely devastating!
Think of this vulnerability like a delivery driver who gets the address wrong and accidentally drops a package through an open window instead of the front door — if they send the wrong package, it could cause chaos inside! This buffer overflow vulnerability in the HTTP request handler allows an attacker to manipulate the 'netmsk' argument, leading to possible remote code execution. The impacted version is Tenda WH450 running firmware 1.0.0.18.
An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially taking full control of your router and compromising your entire network. This means they could snoop on your traffic, manipulate settings, or even launch further attacks. Absolutely devastating! Update your Tenda WH450 to the latest firmware version immediately to patch this critical vulnerability. Ensure that any external access is tightly controlled, and consider changing default credentials if you haven’t already. Regularly audit your network devices for further security. You've got this! Follow these steps, and you'll be the hero keeping your network secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tenda/wh450_firmware | all versions | — |