CVE-2025-15177

HighCVSS 7.2/10Last modified Oct 7, 2026

Description

A vulnerability has been found in Tenda WH450 1.0.0.18. This vulnerability affects unknown code of the file /goform/SetIpBind of the component HTTP Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121

Affected software

Vendor	Product	Versions
Tenda	WH450	1.0.0.18

References

https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SetIpBind/SetIpBind.mdExploit, Third Party Advisory
https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/SetIpBind/SetIpBind.md#reproduceExploit, Third Party Advisory
https://vuldb.com/?ctiid.338562Permissions Required, VDB Entry
https://vuldb.com/?id.338562Third Party Advisory, VDB Entry
https://vuldb.com/?submit.721216Third Party Advisory, VDB Entry
https://www.tenda.com.cn/Product

Timeline

Published: Dec 29, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-151787.2A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the componen CVE-2025-151797.2A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of CVE-2025-151807.2A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte CVE-2025-151819.8A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the CVE-2025-151829.8A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/serve CVE-2025-151839.8A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file CVE-2025-151849.8A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugees CVE-2025-151859.8A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the CVE-2025-151869.8A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of CVE-2025-151876.5A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Ha CVE-2025-151884.8A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of CVE-2025-151898.8A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute.