What is the CVSS score of CVE-2025-7550?

CVE-2025-7550 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2025-7550?

Yes, a public proof-of-concept exploit is available for CVE-2025-7550. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2025-7550?

Within 24 hours: Inventory all Tenda FH1201 devices and isolate affected units from production networks if possible; disable remote management access and restrict access to the router's management interface to trusted IPs only. Within 7 days: Evaluate migration to alternative router vendors; contact Tenda for patch availability and timeline; implement network segmentation to minimize lateral movement if compromise occurs. Within 30 days: Complete replacement of affected devices with vendor-patched alternatives or different manufacturers; verify no unauthorized access or configuration changes occurred on affected routers.

Fh1201 Firmware CVE-2025-7550

EUVD-2025-21281 HIGH

Buffer Overflow (CWE-119)

2025-07-13 cna@vuldb.com

Buffer Overflow Tenda Fh1201 Firmware

8.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-119 OWASP Top 10:2025 A06:2021 - Vulnerable and Outdated Components ASVS 5.0 V15 - Secure Coding and Architecture Bounds checking, buffer size validation MITRE ATT&CK 2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	This vulnerability presents CRITICAL real-world risk despite requiring authentication (PR:L). Risk signals converge strongly: (1) CVSS 8.8 with network-exploitable attack vector (AV:N/AC:L) indicates ease of exploitation; (2) Public POC availability dramatically increases practical exploitation probability; (3) Low attack complexity (AC:L) means no special conditions required; (4) Authentication requirement (PR:L) is mitigated by common default credentials in Tenda devices and the prevalence of already-compromised routers; (5) Complete impact trinity (C:H/I:H/A:H) enables full system compromise. The CVSS vector pattern (AV:N/AC:L/PR:L) combined with disclosed POC and stack-based overflow (typically automatable exploitation) suggests EPSS probability in high range (estimated 0.75+). This is NOT a low-real-risk high-CVSS issue—it is a genuine, actively exploitable, remotely-triggerable code execution flaw.
Exploit ScenarioDerived	An attacker with network access to the router (e.g., connected to WiFi or LAN) obtains valid credentials through default credentials, credential stuffing, or prior compromise. The attacker crafts an HTTP POST request to /goform/GstDhcpSetSer with a malicious 'dips' parameter containing a payload exceeding the buffer size. The stack-based overflow overwrites the return address with a pointer to shellcode (either on-stack or via ROP gadgets). Upon function return, execution jumps to attacker-controlled code, granting full router compromise. The attacker can then pivot to internal network, exfiltrate data, modify traffic, or use the router as a botnet node. Public POC likely automates credential attempt + payload delivery, reducing skill barrier to script-kiddie level. Real-world attacks would target routers exposed to internet or compromised during initial network access phases.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.4% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

CVE-2025-7550 is a critical stack-based buffer overflow vulnerability in Tenda FH1201 firmware version 1.2.0.14(408) affecting the /goform/GstDhcpSetSer endpoint. An authenticated remote attacker can exploit the 'dips' parameter to achieve arbitrary code execution with high impact on confidentiality, integrity, and availability. A public proof-of-concept exists, and the vulnerability exhibits active exploitation characteristics with a CVSS score of 8.8.

RemediationAI

{'type': 'Patch', 'action': 'Apply latest firmware update from Tenda support portal. Check for firmware versions newer than 1.2.0.14(408). Verify patch availability at https://www.tenda.com.cn/ or regional Tenda support site.', 'priority': 'IMMEDIATE'} {'type': 'Network Segmentation', 'action': 'Restrict access to router web management interface (typically port 80/443) to trusted networks only. Use firewall rules to block external access to /goform/* endpoints.', 'priority': 'HIGH'} {'type': 'Access Control', 'action': 'Change default router credentials from factory defaults. This attack requires PR:L (authenticated access), so strong credentials increase barrier.', 'priority': 'HIGH'} {'type': 'Monitoring', 'action': "Monitor router logs for suspicious POST requests to /goform/GstDhcpSetSer with unusual 'dips' parameter values or repeated failed authentication attempts.", 'priority': 'MEDIUM'} {'type': 'Replacement', 'action': 'If patched firmware is unavailable, consider replacing device with patched model or alternative vendor solution.', 'priority': 'CRITICAL if patch unavailable'}

Affected VersionsENISA

FH1201 1.2.0.14(408)

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability exists in the fromGstDhcpSetSer function within the Tenda FH1201 router's web management interface. The flaw is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), a classic stack-based buffer overflow. The /goform/GstDhcpSetSer endpoint processes DHCP server configuration parameters without proper input validation, specifically failing to bounds-check the 'dips' parameter before copying it to a fixed-size stack buffer. This allows an attacker to overwrite the stack frame, including return addresses, enabling code execution. Tenda FH1201 (CPE: cpe:2.3:o:tenda:fh1201_firmware:1.2.0.14(408)) is an entry-level WiFi router commonly deployed in home and small business environments.

Know when Fh1201 Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Jul 15, 2025 - 18:32 vuln.today

Public exploit code

CVE Published

Jul 13, 2025 - 23:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Executive ViewAI

Why It Matters

A critical remote code execution vulnerability affects Tenda FH1201 wireless routers (firmware 1.2.0.14(408)) with no available patch. Exploitation requires no authentication and could allow attackers to compromise network infrastructure, intercept traffic, and access connected devices. Organizations using this router model face immediate risk of network breach.

Business Impact: High

Compensating Controls

Disable the /goform/GstDhcpSetSer endpoint if possible via access control lists; implement network segmentation isolating router management interfaces from general user traffic; deploy WAF rules blocking POST requests to /goform/GstDhcpSetSer with suspicious payloads (particularly those containing buffer overflow patterns); restrict administrative access to the router to specific trusted IP addresses only; monitor router logs for exploitation attempts; disable UPnP and remote management features; consider air-gapping critical network segments that depend on this router.

Threat Intelligence Overview

EPSS Score

0.4%

Top 43% exploitable

Exploit

POC

Public exploit code exists

Data Quality

6 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

GitHub

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC Yes

EPSS 0.4%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +44

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.