CVE-2025-15048

MEDIUM

cna@vuldb.com

Details

CVSS v3: 7.3
CVSS v4: 5.5
CVSS v2: 7.5
NVD published: 2025-12-23 23:15:44
Affected versions: cpe:2.3:o:tenda:wh450_firmware:1.0.0.18:*:*:*:*:*:*:* cpe:2.3:h:tenda:wh450:-:*:*:*:*:*:*:*
Summary: A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Remediation: Not available in our cache.
Exploit info: https://github.com/z472421519/BinaryAudit/blob/main/PoC/CMD/Tenda_WH450/CheckTools/CheckTools.md https://github.com/z472421519/BinaryAudit/blob/main/PoC/CMD/Tenda_WH450/CheckTools/CheckTools.md#reproduce

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.