CVE-2025-5080

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function webExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:fh451_firmware:1.0.0.9:*:*:*:*:*:*:*
cpe:2.3:h:tenda:fh451:-:*:*:*:*:*:*:*

History

20 Jun 2025, 16:03

Type Values Removed Values Added
References () https://www.tenda.com.cn/ - () https://www.tenda.com.cn/ - Product
References () https://vuldb.com/?ctiid.309960 - () https://vuldb.com/?ctiid.309960 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.582059 - () https://vuldb.com/?submit.582059 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.309960 - () https://vuldb.com/?id.309960 - Third Party Advisory, VDB Entry
References () https://github.com/xubeining/Cve_report/blob/main/Shenzhen%20Jixiang%20Tengda%20Technology%20Co.%2C%20Ltd.%20FH451%20has%20a%20Remote%20Code%20Execution%20vulnerability.md - () https://github.com/xubeining/Cve_report/blob/main/Shenzhen%20Jixiang%20Tengda%20Technology%20Co.%2C%20Ltd.%20FH451%20has%20a%20Remote%20Code%20Execution%20vulnerability.md - Exploit, Third Party Advisory
CPE cpe:2.3:h:tenda:fh451:-:*:*:*:*:*:*:*
cpe:2.3:o:tenda:fh451_firmware:1.0.0.9:*:*:*:*:*:*:*
CWE CWE-787
First Time Tenda fh451 Firmware
Tenda fh451
Tenda

22 May 2025, 18:15

Type Values Removed Values Added
CWE CWE-121
CWE-119
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : unknown

22 May 2025, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-22 15:16

Updated : 2025-06-20 16:03


NVD link : CVE-2025-5080

Mitre link : CVE-2025-5080


JSON object : View

Products Affected

tenda

  • fh451_firmware
  • fh451
CWE
CWE-787

Out-of-bounds Write