Vulnerability Description
A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Fh1201 Firmware | 1.2.0.14 |
| Tenda | Fh1201 | - |
Related Weaknesses (CWE)
References
- https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa11858ExploitThird Party Advisory
- https://vuldb.com/?ctiid.316117Permissions Required
- https://vuldb.com/?id.316117Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.610389Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa11858ExploitThird Party Advisory
FAQ
What is CVE-2025-7465?
CVE-2025-7465 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST...
How severe is CVE-2025-7465?
CVE-2025-7465 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-7465?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Fh1201 Firmware, Tenda Fh1201.