CVE-2025-45513

Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter

Critical · published May 9, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in Tenda's FH451 router could be a game-changer for any attacker — just a function call away from chaos! 🔥 Think of it like a crowded elevator that suddenly has too many people trying to squeeze in: when it overloads, everything comes crashing down. In this case, the function.P2pListFilter is the elevator, and when it’s pushed past its limit, it fails spectacularly! An attacker could exploit this flaw to crash the device, leading to potential denial of service or even executing arbitrary code. Imagine an intruder taking control of your network from the comfort of their couch — absolutely devastating! The consequences could range from minor inconvenience to complete network takeover.

Put simply

Think of it like a crowded elevator that suddenly has too many people trying to squeeze in: when it overloads, everything comes crashing down. In this case, the function.P2pListFilter is the elevator, and when it’s pushed past its limit, it fails spectacularly! This vulnerability allows for a stack overflow in the function.P2pListFilter, which can be triggered by specially crafted input. When this function is called with excessive data, it can overwrite memory, causing unintended behavior or a complete crash of the system.

What to do

An attacker could exploit this flaw to crash the device, leading to potential denial of service or even executing arbitrary code. Imagine an intruder taking control of your network from the comfort of their couch — absolutely devastating! The consequences could range from minor inconvenience to complete network takeover. Immediate action is needed! Update your Tenda FH451 to version V1.0.0.10 or later to patch this vulnerability. Additionally, consider implementing network segmentation to limit potential damage and monitor your network for suspicious activity. You've got this! With these steps, you can keep your network secure and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Published
2025-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter
    cvelistv5