Wh450 Firmware
Monthly
Stack-based buffer overflow in the HTTP management interface of the Tenda WH450 router (firmware 1.0.0.18) allows an attacker who can reach the device's administrative web service and supply a crafted 'page' argument to the /goform/webExcptypemanFilte endpoint to corrupt stack memory and potentially achieve arbitrary code execution with the privileges of the web server process. Per the vendor-supplied CVSS 4.0 vector (PR:H), the attacker must first hold privileged/authenticated access to the web interface, a requirement that significantly limits real-world exposure, though the endpoint's true pre-authentication reachability should be verified against the firmware. Publicly available exploit code exists (a GitHub proof-of-concept with reproduction steps), but there is no indication of confirmed active exploitation in the wild, and no vendor patch or advisory has been identified at time of analysis.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers with administrative credentials (PR:H) to execute arbitrary code via the 'page' parameter in the /goform/qossetting endpoint. Publicly available exploit code exists, and the CVSS v4.0 base score is 7.3 (High). Exploitation requires authenticated access to the router's web management interface, which is typically limited to the LAN unless exposed to the internet.
An authenticated stack-based buffer overflow in the Tenda WH450 router (firmware 1.0.0.18) lets a high-privileged user crash or potentially execute code on the device by sending an oversized 'page' parameter to the /goform/VirtualSer HTTP handler. The flaw is network-reachable (CVSS:4.0 base 7.3, AV:N/AC:L, PR:H, UI:N), so it requires an administrative session on the web management interface rather than pre-authentication access. Publicly available exploit code exists, including a proof-of-concept with reproduction steps published on GitHub, but there is no CISA KEV entry indicating confirmed in-the-wild exploitation. Successful abuse yields full loss of confidentiality, integrity, and availability on the router itself, though the assessed scope is unchanged (S:U) and no downstream systems are directly impacted.
Authenticated stack-based buffer overflow in the HTTP management service of Tenda WH450 firmware 1.0.0.18 lets a remote administrator overwrite stack memory through the 'page' argument of the /goform/SetIpBind endpoint, enabling a denial-of-service crash and potentially arbitrary code execution on the device. Exploitation requires valid administrator credentials or an active admin session (CVSS PR:H); no user interaction is needed, and the device is not reachable by anonymous remote attackers in a properly-credentialed default configuration. Publicly available exploit code exists (a detailed BinaryAudit PoC with reproduction steps is published on GitHub), but there is no indication of confirmed active exploitation (not in CISA KEV) and no vendor-released patch or fixed firmware version has been identified in the available data.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows an authenticated attacker who can reach the router's HTTP management interface to corrupt memory by submitting an overlong 'page' parameter to /goform/SafeMacFilter, with high confidentiality, integrity, and availability impact if exploitation succeeds. Publicly available exploit code exists, but the attack is gated by the need for a privileged admin session (PR:H) and by LAN-side reachability of the management panel, which is not exposed to the internet by default. The vendor has not published a fixed firmware version in the available data, so risk is moderate rather than top-tier.
Stack-based buffer overflow in the Tenda WH450 router running firmware 1.0.0.18 lets an authenticated administrator crash or potentially execute code on the device by sending an oversized 'page' argument to the /goform/SafeEmailFilter handler, which is reachable remotely over the web management interface. Publicly available exploit code exists (a BinaryAudit PoC on GitHub) and the CVSS v4.0 base score is 7.3 with PR:H, confirming that a privileged session is a prerequisite; there is no evidence of confirmed active exploitation (not in CISA KEV). Impact is bounded to the device itself - no scope change to downstream systems - but the high integrity and availability sub-scores mean a successful attack can fully compromise the router's configuration. Risk is real but contained: the main gating factor is obtaining admin credentials (default or weak passwords on SOHO routers materially ease this), and exposure of the management UI to untrusted networks.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows an authenticated administrator to corrupt memory and potentially execute arbitrary code by sending a crafted HTTP request to the /goform/RouteStatic endpoint with an oversized 'page' argument. Exploitation requires high-privilege credentials (CVSS PR:H) and network reachability to the router's management interface, which on SOHO devices is typically LAN-side rather than exposed to the WAN. Publicly available exploit code exists (a GitHub proof-of-concept walkthrough of the RouteStatic overflow), so the barrier to reproduction is low for anyone who already has admin access; there is no indication of confirmed active exploitation (CISA KEV) at time of analysis.
A stack-based buffer overflow in the Tenda WH450 router (firmware version 1.0.0.18) can be triggered by sending a crafted 'delno' argument to the /goform/PPTPUserSetting configuration endpoint, allowing memory corruption that can be leveraged for code execution or denial of service. Exploitation requires authenticated administrative access to the device's web management interface, since the vulnerable handler is a privileged configuration endpoint (CVSS PR:H), though the attack itself is network-reachable with no user interaction. Publicly available exploit code exists in a GitHub proof-of-concept, and no vendor-released patch has been identified at time of analysis; the affected scope is limited to this specific firmware version, so risk concentrates on devices with exposed or default-credentialed management interfaces.
Stack-based buffer overflow in Tenda WH450 firmware version 1.0.0.18 allows an attacker with administrative access to the router's web management interface to achieve remote code execution by sending an overlong 'ip1' parameter to the /goform/PPTPServer endpoint. The vulnerability requires high privileges (CVSS PR:H) but no user interaction, and publicly available exploit code exists, making it a realistic risk when the admin panel is exposed to untrusted networks or default credentials are used. The CVSS 4.0 score is 7.3, and no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote command injection in Tenda WH450 firmware 1.0.0.18 allows unauthenticated command execution via the ipaddress parameter in the /goform/CheckTools HTTP endpoint. A publicly available proof-of-concept exploit exists, but the EPSS exploitation probability is low (0.25%).
Stack-based buffer overflow in the Tenda WH450 1.0.0.18 HTTP handler /goform/PPTPDClient allows remote attackers to corrupt memory through an oversized Username parameter, with assessed high impact on confidentiality, integrity, and availability. Exploitation requires reachability to the router’s web-management interface, which is typically LAN-bound, and the assessed vector indicates no authentication or user interaction is required. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory, crash the device, and potentially execute code by sending a crafted netmsk value to the /goform/PPTPClient HTTP endpoint; the CVSS 4.0 vector scores 8.9 with no privileges or user interaction required. Publicly available exploit code exists in a GitHub BinaryAudit proof-of-concept, so the flaw is easy to reproduce, though real-world exposure depends on whether the router's management interface is reachable from the attacker's network. Practical exploitation is often limited because SOHO router web management is commonly bound to the LAN interface unless remote/WAN management has been enabled.
A stack-based buffer overflow in the HTTP request handler of Tenda WH450 firmware 1.0.0.18 allows remote attackers to corrupt memory via a crafted request to the /goform/Natlimit endpoint, specifically by manipulating the 'page' argument. Per the CVSS vector (PR:N/UI:N), no authentication or user interaction is required, so any party able to reach the router's web management interface can attempt exploitation. Publicly available exploit code exists (a GitHub proof-of-concept with reproduction steps), but there is no CISA KEV confirmation of active exploitation; EPSS is 1.08% (65th percentile), and real-world risk is bounded by exposure, since SOHO routers typically restrict this interface to the LAN unless WAN-side remote management is enabled or port forwarding exposes it.
Stack-based buffer overflow in the Tenda WH450 1.0.0.18 firmware web management interface allows remote attackers to corrupt memory and potentially hijack execution flow by sending a crafted request to /goform/NatStaticSetting with an oversized 'page' argument (CVSS 4.0 base 8.9; independent assessment CVSS 3.1 9.8-equivalent vector AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact to the device). Publicly available exploit code exists in the z472421519/BinaryAudit repository, including a reproduce walkthrough, but there is no CISA KEV listing, so active exploitation is not confirmed. EPSS is 1.08% (65th percentile) - modest but non-trivial for an internet-exposed SOHO device - and the practical risk is gated by exposure, since the WH450 management interface is typically LAN-facing and only reachable from the WAN if remote web administration has been enabled or the device is port-forwarded.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory on the device by sending a crafted 'page' parameter to the /goform/SafeUrlFilter endpoint, with high impact to confidentiality, integrity and availability per the assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N). Publicly available exploit code exists, but EPSS estimates only a 1.00% chance of exploitation in the next 30 days (62nd percentile) and no CISA KEV listing indicates confirmed active exploitation. Signals are mixed: the technical severity is high, yet the practical attack surface is limited because the HTTP management interface on default SOHO deployments is LAN-facing, so a real-world attacker generally needs local-network adjacency unless WAN-side remote management has been enabled.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers to achieve limited confidentiality, integrity, and availability impacts via the /goform/L7Port endpoint. Public exploit code is available (EPSS 0.11%), but no active exploitation has been reported. The vulnerability, though network-accessible without authentication, is constrained in its real-world impact.
A stack-based buffer overflow in the HTTP request handler of Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/L7Im endpoint with an oversized 'page' parameter. Per the supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) no credentials, special configuration, or user interaction are required, and publicly available exploit code exists (a proof-of-concept write-up is published on GitHub), though CISA KEV does not list this issue as actively exploited. EPSS places exploitation likelihood at roughly 1.00% (62nd percentile), reflecting that the practical exposure depends on whether the router's web management interface is reachable by the attacker, since SOHO devices of this class typically restrict administration to the LAN by default.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers to corrupt memory and potentially achieve arbitrary code execution on the device by sending a crafted HTTP request to the /goform/CheckTools endpoint with an oversized 'ipaddress' argument. The CVSS:4.0 vector (8.9, AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, and availability impact) indicates the attack is network-reachable, low-complexity, and requires neither authentication nor user interaction, so any device with an exposed management interface is directly at risk. Publicly available exploit code exists (a GitHub PoC walkthrough with reproduction steps), while EPSS is modest at 0.97% (61st percentile) and there is no CISA KEV entry, meaning no confirmed active exploitation at time of analysis.
Stack-based buffer overflow in the HTTP request handler of the Tenda WH450 router (firmware 1.0.0.18) lets a remote attacker corrupt memory by sending a crafted request to /goform/DhcpListClient with a manipulated 'page' parameter, with high confidentiality, integrity and availability impact on the device. Publicly available exploit code exists, including a GitHub proof-of-concept with full reproduction steps, so the barrier to exploitation is low; there is no CISA KEV listing, meaning confirmed active exploitation in the wild has not been established. The vendor-supplied CVSS 4.0 vector advertises an unauthenticated attack (PR:N, base 8.9), but our independent assessment scores it AV:N/AC:L/PR:L/UI:N (CVSS 3.1, all-high impact) because the DHCP client-list endpoint may sit behind the router admin session - if so, valid credentials or an authenticated session are required, and practical exposure is largely limited to attackers on the same LAN unless the web UI is deliberately exposed to the WAN.
Stack-based buffer overflow in the HTTP management interface of the Tenda WH450 router (firmware 1.0.0.18) allows an attacker who can reach the device's administrative web service and supply a crafted 'page' argument to the /goform/webExcptypemanFilte endpoint to corrupt stack memory and potentially achieve arbitrary code execution with the privileges of the web server process. Per the vendor-supplied CVSS 4.0 vector (PR:H), the attacker must first hold privileged/authenticated access to the web interface, a requirement that significantly limits real-world exposure, though the endpoint's true pre-authentication reachability should be verified against the firmware. Publicly available exploit code exists (a GitHub proof-of-concept with reproduction steps), but there is no indication of confirmed active exploitation in the wild, and no vendor patch or advisory has been identified at time of analysis.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers with administrative credentials (PR:H) to execute arbitrary code via the 'page' parameter in the /goform/qossetting endpoint. Publicly available exploit code exists, and the CVSS v4.0 base score is 7.3 (High). Exploitation requires authenticated access to the router's web management interface, which is typically limited to the LAN unless exposed to the internet.
An authenticated stack-based buffer overflow in the Tenda WH450 router (firmware 1.0.0.18) lets a high-privileged user crash or potentially execute code on the device by sending an oversized 'page' parameter to the /goform/VirtualSer HTTP handler. The flaw is network-reachable (CVSS:4.0 base 7.3, AV:N/AC:L, PR:H, UI:N), so it requires an administrative session on the web management interface rather than pre-authentication access. Publicly available exploit code exists, including a proof-of-concept with reproduction steps published on GitHub, but there is no CISA KEV entry indicating confirmed in-the-wild exploitation. Successful abuse yields full loss of confidentiality, integrity, and availability on the router itself, though the assessed scope is unchanged (S:U) and no downstream systems are directly impacted.
Authenticated stack-based buffer overflow in the HTTP management service of Tenda WH450 firmware 1.0.0.18 lets a remote administrator overwrite stack memory through the 'page' argument of the /goform/SetIpBind endpoint, enabling a denial-of-service crash and potentially arbitrary code execution on the device. Exploitation requires valid administrator credentials or an active admin session (CVSS PR:H); no user interaction is needed, and the device is not reachable by anonymous remote attackers in a properly-credentialed default configuration. Publicly available exploit code exists (a detailed BinaryAudit PoC with reproduction steps is published on GitHub), but there is no indication of confirmed active exploitation (not in CISA KEV) and no vendor-released patch or fixed firmware version has been identified in the available data.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows an authenticated attacker who can reach the router's HTTP management interface to corrupt memory by submitting an overlong 'page' parameter to /goform/SafeMacFilter, with high confidentiality, integrity, and availability impact if exploitation succeeds. Publicly available exploit code exists, but the attack is gated by the need for a privileged admin session (PR:H) and by LAN-side reachability of the management panel, which is not exposed to the internet by default. The vendor has not published a fixed firmware version in the available data, so risk is moderate rather than top-tier.
Stack-based buffer overflow in the Tenda WH450 router running firmware 1.0.0.18 lets an authenticated administrator crash or potentially execute code on the device by sending an oversized 'page' argument to the /goform/SafeEmailFilter handler, which is reachable remotely over the web management interface. Publicly available exploit code exists (a BinaryAudit PoC on GitHub) and the CVSS v4.0 base score is 7.3 with PR:H, confirming that a privileged session is a prerequisite; there is no evidence of confirmed active exploitation (not in CISA KEV). Impact is bounded to the device itself - no scope change to downstream systems - but the high integrity and availability sub-scores mean a successful attack can fully compromise the router's configuration. Risk is real but contained: the main gating factor is obtaining admin credentials (default or weak passwords on SOHO routers materially ease this), and exposure of the management UI to untrusted networks.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows an authenticated administrator to corrupt memory and potentially execute arbitrary code by sending a crafted HTTP request to the /goform/RouteStatic endpoint with an oversized 'page' argument. Exploitation requires high-privilege credentials (CVSS PR:H) and network reachability to the router's management interface, which on SOHO devices is typically LAN-side rather than exposed to the WAN. Publicly available exploit code exists (a GitHub proof-of-concept walkthrough of the RouteStatic overflow), so the barrier to reproduction is low for anyone who already has admin access; there is no indication of confirmed active exploitation (CISA KEV) at time of analysis.
A stack-based buffer overflow in the Tenda WH450 router (firmware version 1.0.0.18) can be triggered by sending a crafted 'delno' argument to the /goform/PPTPUserSetting configuration endpoint, allowing memory corruption that can be leveraged for code execution or denial of service. Exploitation requires authenticated administrative access to the device's web management interface, since the vulnerable handler is a privileged configuration endpoint (CVSS PR:H), though the attack itself is network-reachable with no user interaction. Publicly available exploit code exists in a GitHub proof-of-concept, and no vendor-released patch has been identified at time of analysis; the affected scope is limited to this specific firmware version, so risk concentrates on devices with exposed or default-credentialed management interfaces.
Stack-based buffer overflow in Tenda WH450 firmware version 1.0.0.18 allows an attacker with administrative access to the router's web management interface to achieve remote code execution by sending an overlong 'ip1' parameter to the /goform/PPTPServer endpoint. The vulnerability requires high privileges (CVSS PR:H) but no user interaction, and publicly available exploit code exists, making it a realistic risk when the admin panel is exposed to untrusted networks or default credentials are used. The CVSS 4.0 score is 7.3, and no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote command injection in Tenda WH450 firmware 1.0.0.18 allows unauthenticated command execution via the ipaddress parameter in the /goform/CheckTools HTTP endpoint. A publicly available proof-of-concept exploit exists, but the EPSS exploitation probability is low (0.25%).
Stack-based buffer overflow in the Tenda WH450 1.0.0.18 HTTP handler /goform/PPTPDClient allows remote attackers to corrupt memory through an oversized Username parameter, with assessed high impact on confidentiality, integrity, and availability. Exploitation requires reachability to the router’s web-management interface, which is typically LAN-bound, and the assessed vector indicates no authentication or user interaction is required. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory, crash the device, and potentially execute code by sending a crafted netmsk value to the /goform/PPTPClient HTTP endpoint; the CVSS 4.0 vector scores 8.9 with no privileges or user interaction required. Publicly available exploit code exists in a GitHub BinaryAudit proof-of-concept, so the flaw is easy to reproduce, though real-world exposure depends on whether the router's management interface is reachable from the attacker's network. Practical exploitation is often limited because SOHO router web management is commonly bound to the LAN interface unless remote/WAN management has been enabled.
A stack-based buffer overflow in the HTTP request handler of Tenda WH450 firmware 1.0.0.18 allows remote attackers to corrupt memory via a crafted request to the /goform/Natlimit endpoint, specifically by manipulating the 'page' argument. Per the CVSS vector (PR:N/UI:N), no authentication or user interaction is required, so any party able to reach the router's web management interface can attempt exploitation. Publicly available exploit code exists (a GitHub proof-of-concept with reproduction steps), but there is no CISA KEV confirmation of active exploitation; EPSS is 1.08% (65th percentile), and real-world risk is bounded by exposure, since SOHO routers typically restrict this interface to the LAN unless WAN-side remote management is enabled or port forwarding exposes it.
Stack-based buffer overflow in the Tenda WH450 1.0.0.18 firmware web management interface allows remote attackers to corrupt memory and potentially hijack execution flow by sending a crafted request to /goform/NatStaticSetting with an oversized 'page' argument (CVSS 4.0 base 8.9; independent assessment CVSS 3.1 9.8-equivalent vector AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity and availability impact to the device). Publicly available exploit code exists in the z472421519/BinaryAudit repository, including a reproduce walkthrough, but there is no CISA KEV listing, so active exploitation is not confirmed. EPSS is 1.08% (65th percentile) - modest but non-trivial for an internet-exposed SOHO device - and the practical risk is gated by exposure, since the WH450 management interface is typically LAN-facing and only reachable from the WAN if remote web administration has been enabled or the device is port-forwarded.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory on the device by sending a crafted 'page' parameter to the /goform/SafeUrlFilter endpoint, with high impact to confidentiality, integrity and availability per the assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N). Publicly available exploit code exists, but EPSS estimates only a 1.00% chance of exploitation in the next 30 days (62nd percentile) and no CISA KEV listing indicates confirmed active exploitation. Signals are mixed: the technical severity is high, yet the practical attack surface is limited because the HTTP management interface on default SOHO deployments is LAN-facing, so a real-world attacker generally needs local-network adjacency unless WAN-side remote management has been enabled.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers to achieve limited confidentiality, integrity, and availability impacts via the /goform/L7Port endpoint. Public exploit code is available (EPSS 0.11%), but no active exploitation has been reported. The vulnerability, though network-accessible without authentication, is constrained in its real-world impact.
A stack-based buffer overflow in the HTTP request handler of Tenda WH450 firmware 1.0.0.18 allows unauthenticated remote attackers to corrupt memory and potentially achieve code execution by sending a crafted request to the /goform/L7Im endpoint with an oversized 'page' parameter. Per the supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) no credentials, special configuration, or user interaction are required, and publicly available exploit code exists (a proof-of-concept write-up is published on GitHub), though CISA KEV does not list this issue as actively exploited. EPSS places exploitation likelihood at roughly 1.00% (62nd percentile), reflecting that the practical exposure depends on whether the router's web management interface is reachable by the attacker, since SOHO devices of this class typically restrict administration to the LAN by default.
Stack-based buffer overflow in Tenda WH450 firmware 1.0.0.18 allows remote attackers to corrupt memory and potentially achieve arbitrary code execution on the device by sending a crafted HTTP request to the /goform/CheckTools endpoint with an oversized 'ipaddress' argument. The CVSS:4.0 vector (8.9, AV:N/AC:L/PR:N/UI:N with high confidentiality, integrity, and availability impact) indicates the attack is network-reachable, low-complexity, and requires neither authentication nor user interaction, so any device with an exposed management interface is directly at risk. Publicly available exploit code exists (a GitHub PoC walkthrough with reproduction steps), while EPSS is modest at 0.97% (61st percentile) and there is no CISA KEV entry, meaning no confirmed active exploitation at time of analysis.
Stack-based buffer overflow in the HTTP request handler of the Tenda WH450 router (firmware 1.0.0.18) lets a remote attacker corrupt memory by sending a crafted request to /goform/DhcpListClient with a manipulated 'page' parameter, with high confidentiality, integrity and availability impact on the device. Publicly available exploit code exists, including a GitHub proof-of-concept with full reproduction steps, so the barrier to exploitation is low; there is no CISA KEV listing, meaning confirmed active exploitation in the wild has not been established. The vendor-supplied CVSS 4.0 vector advertises an unauthenticated attack (PR:N, base 8.9), but our independent assessment scores it AV:N/AC:L/PR:L/UI:N (CVSS 3.1, all-high impact) because the DHCP client-list endpoint may sit behind the router admin session - if so, valid credentials or an authenticated session are required, and practical exposure is largely limited to attackers on the same LAN unless the web UI is deliberately exposed to the WAN.