VULNERABILITY INTELLIGENCE

CVE-2025-14665

CVSS score9.8 CRITICAL
EPSS probability0.98%
CISA KEVNot currently listed
Published2025-12-14
Last modified2026-09-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Weakness classification

  • cna@vuldb.com: CWE-119

Primary references