Tenda Fh451 Firmware vulnerabilities

CVE-2025-7855 [HIGH] CWE-119 CVE-2025-7855: A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerabil A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely.

CVE-2025-7747 [HIGH] CWE-119 CVE-2025-7747: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the funct A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. The manipulation of the argument PPW leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and ma

CVE-2024-46046 [CRITICAL] CWE-787 CVE-2024-46046: Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function.

CVE-2025-45513 [CRITICAL] CWE-121 CVE-2025-45513: Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter. Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.

CVE-2025-44176 [MEDIUM] CWE-77 CVE-2025-44176: Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function. Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.

CVE-2024-46047 [HIGH] CWE-787 CVE-2024-46047: Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function. Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function.

CVE-2024-12002 [MEDIUM] CWE-404 CVE-2024-12002: A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed t

CVE-2025-45514 [MEDIUM] CWE-121 CVE-2025-45514: Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm. Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.