CVE-2025-7465

A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14:*:*:*:*:*:*:*
cpe:2.3:h:tenda:fh1201:-:*:*:*:*:*:*:*

History

15 Jul 2025, 18:09

Type Values Removed Values Added
First Time Tenda
Tenda fh1201
Tenda fh1201 Firmware
CPE cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14:*:*:*:*:*:*:*
cpe:2.3:h:tenda:fh1201:-:*:*:*:*:*:*:*
References () https://www.tenda.com.cn/ - () https://www.tenda.com.cn/ - Product
References () https://vuldb.com/?submit.610389 - () https://vuldb.com/?submit.610389 - Third Party Advisory, VDB Entry
References () https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 - () https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 - Exploit, Third Party Advisory
References () https://vuldb.com/?id.316117 - () https://vuldb.com/?id.316117 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.316117 - () https://vuldb.com/?ctiid.316117 - Permissions Required

14 Jul 2025, 21:15

Type Values Removed Values Added
CWE CWE-120
CWE-119
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : unknown

12 Jul 2025, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-12 07:15

Updated : 2025-07-15 18:09


NVD link : CVE-2025-7465

Mitre link : CVE-2025-7465


JSON object : View

Products Affected

tenda

  • fh1201_firmware
  • fh1201
CWE

No CWE.