Vulnerability Description
A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Fh1201 Firmware | 1.2.0.14 |
| Tenda | Fh1201 | - |
Related Weaknesses (CWE)
References
- https://candle-throne-f75.notion.site/Tenda-FH1201-fromSafeUrlFilter-229df0aa118ExploitThird Party Advisory
- https://vuldb.com/?ctiid.316120Permissions RequiredVDB Entry
- https://vuldb.com/?id.316120Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.610394Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://candle-throne-f75.notion.site/Tenda-FH1201-fromSafeUrlFilter-229df0aa118ExploitThird Party Advisory
FAQ
What is CVE-2025-7468?
CVE-2025-7468 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTT...
How severe is CVE-2025-7468?
CVE-2025-7468 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-7468?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Fh1201 Firmware, Tenda Fh1201.