EUVD-2025-21282Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
CVE-2025-7549 is a critical stack-based buffer overflow vulnerability in Tenda FH1201 firmware version 1.2.0.14(408) affecting the L7Prot form handler. An authenticated remote attacker can exploit the 'page' parameter to overflow the stack, achieving complete compromise of the device with high confidentiality, integrity, and availability impact. The vulnerability has public exploit disclosure and should be considered actively exploitable.
Technical ContextAI
The vulnerability exists in the frmL7ProtForm function within the /goform/L7Prot endpoint of Tenda FH1201 router firmware. The root cause is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), specifically a classic stack-based buffer overflow where user-supplied input to the 'page' parameter is not properly validated or bounds-checked before being written to a fixed-size stack buffer. Tenda FH1201 is a consumer-grade wireless router running proprietary firmware. The L7Prot functionality typically handles Layer 7 protocol filtering/management in the device's web interface. The lack of input validation on web form parameters is a common vulnerability class in embedded device firmware where memory safety is not enforced.
RemediationAI
Immediate actions: (1) Patch to the latest available firmware version for FH1201 (check Tenda support website for versions newer than 1.2.0.14(408)); (2) if patch unavailable, apply temporary mitigations—restrict admin interface access to trusted IPs via firewall rules, disable remote management if enabled, change default credentials immediately; (3) monitor for suspicious access patterns in router logs. Specific patch version numbers are not available in provided references—contact Tenda support or check their official firmware download page for available updates. Workaround: disallow access to /goform/L7Prot endpoint at network perimeter until patch is applied. Consider network segmentation to limit impact if device is compromised.
Share
External POC / Exploit Code
Leaving vuln.today