Vulnerability Description
A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_index causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Wh450 Firmware | 1.0.0.18 |
| Tenda | Wh450 | - |
Related Weaknesses (CWE)
References
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/onSSIDChExploitThird Party Advisory
- https://vuldb.com/?ctiid.337370Permissions RequiredVDB Entry
- https://vuldb.com/?id.337370Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.715362Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/onSSIDChExploitThird Party Advisory
FAQ
What is CVE-2025-14879?
CVE-2025-14879 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_i...
How severe is CVE-2025-14879?
CVE-2025-14879 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-14879?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Wh450 Firmware, Tenda Wh450.