CVE-2025-7551

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-121

Affected software

VendorProductVersions
TendaFH12011.2.0.14(408)

References

Timeline

Published
Jul 14, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-75526.3A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle CVE-2025-75537.2A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component SystCVE-2025-75542.4A vulnerability classified as problematic was found in Sapido RB-1802 1.0.32. This vulnerability affects unknown code of the file urlfilter.CVE-2025-75558.8A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown procesCVE-2025-75568.8A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the fileCVE-2025-75578.8A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown fCVE-2025-75588.8A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionalitCVE-2025-75598.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part oCVE-2025-75608.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknoCVE-2025-75618.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. This issue affects some unknown proCVE-2025-75628.8A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of theCVE-2025-75638.8A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknow
CVE-2025-7551: High severity, CVSS 8.8 | Vulnix