CVE-2025-15180EPSS p64.5%
CVE-2025-15180CVE-2025-15180
tenda / wh450_firmware
Description
A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
Scoring
| CVSS | 7.2 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 1.09% probability of exploitation · percentile 64.5% · 2026-10-10T12:00:23Z |
| Last modified | 2026-10-07 |