CVE-2025-7747

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. The manipulation of the argument PPW leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-77483.5A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article PCVE-2025-77499.8A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affectsCVE-2025-77509.8A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown CVE-2025-77519.8A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerabiCVE-2025-77529.8A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some CVE-2025-77539.8A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknowCVE-2025-77547.5A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affectCVE-2025-77558.8A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown procesCVE-2025-77564.3A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulaCVE-2025-77579.8A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionCVE-2025-77588.8A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the CVE-2025-77598.8A vulnerability was identified in thinkgem JeeSite up to 5.12.0. This vulnerability affects unknown code of the file modules/core/src/main/j
CVE-2025-7747: High severity, CVSS 8.8 | Vulnix