📦 Wh450 Firmware

by Tenda

🔍 What is Wh450 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-15046

CRITICAL CVSS 9.8 Dec 23, 2025

This is a critical stack-based buffer overflow vulnerability in Tenda WH450 routers that allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests. Attackers can exp...

CVE-2025-15047

CRITICAL CVSS 9.8 Dec 23, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers by sending specially crafted HTTP requests to the PPTPDClient endpoint. Attackers can exploit a stack-based ...

CVE-2025-15044

CRITICAL CVSS 9.8 Dec 23, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers by exploiting a stack-based buffer overflow in the NatStaticSetting function. Attackers can send specially c...

CVE-2025-15045

CRITICAL CVSS 9.8 Dec 23, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/Natlimit endpoint. This a...

CVE-2025-15010

CRITICAL CVSS 9.8 Dec 22, 2025

A stack-based buffer overflow vulnerability exists in Tenda WH450 routers version 1.0.0.18, specifically in the /goform/SafeUrlFilter endpoint. Remote attackers can exploit this to execute arbitrary c...

CVE-2025-15006

CRITICAL CVSS 9.8 Dec 22, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers by exploiting a stack-based buffer overflow in the HTTP request handler. Attackers can send specially crafte...

CVE-2025-15007

CRITICAL CVSS 9.8 Dec 22, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/L7Im endpoint. This affec...

CVE-2025-14879

CRITICAL CVSS 9.8 Dec 18, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers by exploiting a stack-based buffer overflow in the HTTP request handler. Attackers can send specially crafte...

CVE-2025-14878

CRITICAL CVSS 9.8 Dec 18, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers by exploiting a stack-based buffer overflow in the wirelessRestart HTTP handler. Attackers can take full con...

CVE-2025-14665

CRITICAL CVSS 9.8 Dec 14, 2025

A remote stack-based buffer overflow vulnerability in Tenda WH450 routers allows attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/DhcpListClient endpoint. ...

CVE-2025-15180

HIGH CVSS 7.2 Dec 29, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/webExcptypemanFilte endpo...

CVE-2025-15178

HIGH CVSS 7.2 Dec 29, 2025

This vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the HTTP request handler. Attackers can exploit this by sending special...

CVE-2025-15179

HIGH CVSS 7.2 Dec 29, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 router firmware version 1.0.0.18 allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the /goform/qosset...

CVE-2025-15177

HIGH CVSS 7.2 Dec 29, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 router firmware version 1.0.0.18 allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/...

CVE-2025-15163

HIGH CVSS 7.2 Dec 29, 2025

This vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the SafeEmailFilter functionality. Attackers can exploit this without a...

CVE-2025-15164

HIGH CVSS 7.2 Dec 29, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the /goform/SafeMacFilter endpoint. This af...

CVE-2025-15162

HIGH CVSS 7.2 Dec 29, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by manipulating the 'page' parameter in the /goform/RouteStatic endpoint. This affe...

CVE-2025-15160

HIGH CVSS 7.2 Dec 28, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda WH450 routers via a stack-based buffer overflow in the PPTPServer component. Attackers can exploit this by sending special...

CVE-2025-15161

HIGH CVSS 7.2 Dec 28, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by manipulating the 'delno' parameter in the /goform/PPTPUserSetting endpoint. This...

CVE-2025-15048

HIGH CVSS 7.3 Dec 23, 2025

This vulnerability allows remote attackers to execute arbitrary commands on Tenda WH450 routers by injecting malicious input into the 'ipaddress' parameter of the HTTP request handler. Attackers can e...

CVE-2025-15008

HIGH CVSS 7.3 Dec 22, 2025

A stack-based buffer overflow vulnerability in Tenda WH450 routers allows remote attackers to execute arbitrary code by sending specially crafted HTTP requests to the /goform/L7Port endpoint. This aff...