CVE-2025-15160CWE-119CWE-121

CVE-2025-15160

High · published December 29, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

⚡ A sneaky stack-based buffer overflow lurks in Tenda WH450's firmware! Just a remote manipulation of an argument could send your device into chaos! 🔥 Think of it like a crowded elevator where too many people push the buttons at once, causing it to malfunction. When the argument 'ip1' gets overloaded, it can overflow and push the elevator into uncharted territory! An attacker could remotely exploit this vulnerability to crash the device or execute arbitrary code, potentially taking control of your network. Imagine losing access to all your connected devices just because someone squeezed into your digital elevator unexpectedly!

Put simply

Think of it like a crowded elevator where too many people push the buttons at once, causing it to malfunction. When the argument 'ip1' gets overloaded, it can overflow and push the elevator into uncharted territory! This vulnerability in Tenda WH450 version 1.0.0.18 allows remote attackers to trigger a stack-based buffer overflow through manipulation of the 'ip1' argument in the /goform/PPTPServer file, leading to potential unauthorized access.

What to do

An attacker could remotely exploit this vulnerability to crash the device or execute arbitrary code, potentially taking control of your network. Imagine losing access to all your connected devices just because someone squeezed into your digital elevator unexpectedly! Immediately patch your Tenda WH450 to the latest firmware version. Review your device's security settings, and consider disabling remote access until you’re sure it’s secure. Regularly check for firmware updates to stay protected! You've got this! With these steps, you can secure your device and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00867 · 58.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-12-29T04:15Z
Affected products (1)
ProductVersionsFixed in
tenda/wh450_firmwareall versions—
References (5)
EPSS history
Timeline
  • 28 DEC 22:32Z
    Tenda WH450 PPTPServer stack-based overflow
    cvelistv5